cluster-engine.ts

import * as iam from '@aws-cdk/aws-iam';
import * as secretsmanager from '@aws-cdk/aws-secretsmanager';
import * as core from '@aws-cdk/core';
import { IEngine } from './engine';
import { EngineVersion } from './engine-version';
import { IParameterGroup, ParameterGroup } from './parameter-group';

/**
 * The extra options passed to the {@link IClusterEngine.bindToCluster} method.
 */
export interface ClusterEngineBindOptions {
  /**
   * The role used for S3 importing.
   *
   * @default - none
   */
  readonly s3ImportRole?: iam.IRole;

  /**
   * The role used for S3 exporting.
   *
   *  @default - none
   */
  readonly s3ExportRole?: iam.IRole;

  /**
   * The customer-provided ParameterGroup.
   *
   * @default - none
   */
  readonly parameterGroup?: IParameterGroup;
}

/**
 * The type returned from the {@link IClusterEngine.bindToCluster} method.
 */
export interface ClusterEngineConfig {
  /**
   * The ParameterGroup to use for the cluster.
   *
   * @default - no ParameterGroup will be used
   */
  readonly parameterGroup?: IParameterGroup;

  /**
   * The port to use for this cluster,
   * unless the customer specified the port directly.
   *
   * @default - use the default port for clusters (3306)
   */
  readonly port?: number;
}

/**
 * The interface representing a database cluster (as opposed to instance) engine.
 */
export interface IClusterEngine extends IEngine {
  /** The application used by this engine to perform rotation for a single-user scenario. */
  readonly singleUserRotationApplication: secretsmanager.SecretRotationApplication;

  /** The application used by this engine to perform rotation for a multi-user scenario. */
  readonly multiUserRotationApplication: secretsmanager.SecretRotationApplication;

  /** The log types that are available with this engine type */
  readonly supportedLogTypes: string[];

  /**
   * Method called when the engine is used to create a new cluster.
   */
  bindToCluster(scope: core.Construct, options: ClusterEngineBindOptions): ClusterEngineConfig;
}

interface ClusterEngineBaseProps {
  readonly engineType: string;
  readonly singleUserRotationApplication: secretsmanager.SecretRotationApplication;
  readonly multiUserRotationApplication: secretsmanager.SecretRotationApplication;
  readonly defaultPort?: number;
  readonly engineVersion?: EngineVersion;
}

abstract class ClusterEngineBase implements IClusterEngine {
  public readonly engineType: string;
  public readonly engineVersion?: EngineVersion;
  public readonly parameterGroupFamily?: string;
  public readonly singleUserRotationApplication: secretsmanager.SecretRotationApplication;
  public readonly multiUserRotationApplication: secretsmanager.SecretRotationApplication;
  public abstract readonly supportedLogTypes: string[];

  private readonly defaultPort?: number;

  constructor(props: ClusterEngineBaseProps) {
    this.engineType = props.engineType;
    this.singleUserRotationApplication = props.singleUserRotationApplication;
    this.multiUserRotationApplication = props.multiUserRotationApplication;
    this.defaultPort = props.defaultPort;
    this.engineVersion = props.engineVersion;
    this.parameterGroupFamily = this.engineVersion ? `${this.engineType}${this.engineVersion.majorVersion}` : undefined;
  }

  public bindToCluster(scope: core.Construct, options: ClusterEngineBindOptions): ClusterEngineConfig {
    const parameterGroup = options.parameterGroup ?? this.defaultParameterGroup(scope);
    return {
      parameterGroup,
      port: this.defaultPort,
    };
  }

  /**
   * Return an optional default ParameterGroup,
   * possibly an imported one,
   * if one wasn't provided by the customer explicitly.
   */
  protected abstract defaultParameterGroup(scope: core.Construct): IParameterGroup | undefined;
}

interface MysqlClusterEngineBaseProps {
  readonly engineType: string;
  readonly engineVersion?: EngineVersion;
  readonly defaultMajorVersion: string;
}

abstract class MySqlClusterEngineBase extends ClusterEngineBase {
  public readonly supportedLogTypes: string[] = ['error', 'general', 'slowquery', 'audit'];

  constructor(props: MysqlClusterEngineBaseProps) {
    super({
      ...props,
      singleUserRotationApplication: secretsmanager.SecretRotationApplication.MYSQL_ROTATION_SINGLE_USER,
      multiUserRotationApplication: secretsmanager.SecretRotationApplication.MYSQL_ROTATION_MULTI_USER,
      engineVersion: props.engineVersion ? props.engineVersion : { majorVersion: props.defaultMajorVersion },
    });
  }

  public bindToCluster(scope: core.Construct, options: ClusterEngineBindOptions): ClusterEngineConfig {
    const config = super.bindToCluster(scope, options);
    const parameterGroup = options.parameterGroup ?? (options.s3ImportRole || options.s3ExportRole
      ? new ParameterGroup(scope, 'ClusterParameterGroup', {
        engine: this,
      })
      : config.parameterGroup);
    if (options.s3ImportRole) {
      parameterGroup?.addParameter('aurora_load_from_s3_role', options.s3ImportRole.roleArn);
    }
    if (options.s3ExportRole) {
      parameterGroup?.addParameter('aurora_select_into_s3_role', options.s3ExportRole.roleArn);
    }

    return {
      ...config,
      parameterGroup,
    };
  }
}

/**
 * The versions for the Aurora cluster engine
 * (those returned by {@link DatabaseClusterEngine.aurora}).
 */
export class AuroraEngineVersion {
  /** Version "5.6.10a". */
  public static readonly VER_10A = AuroraEngineVersion.builtIn_5_6('10a', false);
  /** Version "5.6.mysql_aurora.1.17.9". */
  public static readonly VER_1_17_9 = AuroraEngineVersion.builtIn_5_6('1.17.9');
  /** Version "5.6.mysql_aurora.1.19.0". */
  public static readonly VER_1_19_0 = AuroraEngineVersion.builtIn_5_6('1.19.0');
  /** Version "5.6.mysql_aurora.1.19.1". */
  public static readonly VER_1_19_1 = AuroraEngineVersion.builtIn_5_6('1.19.1');
  /** Version "5.6.mysql_aurora.1.19.2". */
  public static readonly VER_1_19_2 = AuroraEngineVersion.builtIn_5_6('1.19.2');
  /** Version "5.6.mysql_aurora.1.19.5". */
  public static readonly VER_1_19_5 = AuroraEngineVersion.builtIn_5_6('1.19.5');
  /** Version "5.6.mysql_aurora.1.19.6". */
  public static readonly VER_1_19_6 = AuroraEngineVersion.builtIn_5_6('1.19.6');
  /** Version "5.6.mysql_aurora.1.20.0". */
  public static readonly VER_1_20_0 = AuroraEngineVersion.builtIn_5_6('1.20.0');
  /** Version "5.6.mysql_aurora.1.20.1". */
  public static readonly VER_1_20_1 = AuroraEngineVersion.builtIn_5_6('1.20.1');
  /** Version "5.6.mysql_aurora.1.21.0". */
  public static readonly VER_1_21_0 = AuroraEngineVersion.builtIn_5_6('1.21.0');
  /** Version "5.6.mysql_aurora.1.22.0". */
  public static readonly VER_1_22_0 = AuroraEngineVersion.builtIn_5_6('1.22.0');
  /** Version "5.6.mysql_aurora.1.22.1". */
  public static readonly VER_1_22_1 = AuroraEngineVersion.builtIn_5_6('1.22.1');
  /** Version "5.6.mysql_aurora.1.22.1.3". */
  public static readonly VER_1_22_1_3 = AuroraEngineVersion.builtIn_5_6('1.22.1.3');
  /** Version "5.6.mysql_aurora.1.22.2". */
  public static readonly VER_1_22_2 = AuroraEngineVersion.builtIn_5_6('1.22.2');

  /**
   * Create a new AuroraEngineVersion with an arbitrary version.
   *
   * @param auroraFullVersion the full version string,
   *   for example "5.6.mysql_aurora.1.78.3.6"
   * @param auroraMajorVersion the major version of the engine,
   *   defaults to "5.6"
   */
  public static of(auroraFullVersion: string, auroraMajorVersion?: string): AuroraEngineVersion {
    return new AuroraEngineVersion(auroraFullVersion, auroraMajorVersion);
  }

  private static builtIn_5_6(minorVersion: string, addStandardPrefix: boolean = true): AuroraEngineVersion {
    return new AuroraEngineVersion(`5.6.${addStandardPrefix ? 'mysql_aurora.' : ''}${minorVersion}`);
  }

  /** The full version string, for example, "5.6.mysql_aurora.1.78.3.6". */
  public readonly auroraFullVersion: string;
  /** The major version of the engine. Currently, it's always "5.6". */
  public readonly auroraMajorVersion: string;

  private constructor(auroraFullVersion: string, auroraMajorVersion: string = '5.6') {
    this.auroraFullVersion = auroraFullVersion;
    this.auroraMajorVersion = auroraMajorVersion;
  }
}

/**
 * Creation properties of the plain Aurora database cluster engine.
 * Used in {@link DatabaseClusterEngine.aurora}.
 */
export interface AuroraClusterEngineProps {
  /** The version of the Aurora cluster engine. */
  readonly version: AuroraEngineVersion;
}

class AuroraClusterEngine extends MySqlClusterEngineBase {
  constructor(version?: AuroraEngineVersion) {
    super({
      engineType: 'aurora',
      engineVersion: version
        ? {
          fullVersion: version.auroraFullVersion,
          majorVersion: version.auroraMajorVersion,
        }
        : undefined,
      defaultMajorVersion: '5.6',
    });
  }

  protected defaultParameterGroup(_scope: core.Construct): IParameterGroup | undefined {
    // the default.aurora5.6 ParameterGroup is actually the default,
    // so just return undefined in this case
    return undefined;
  }
}

/**
 * The versions for the Aurora MySQL cluster engine
 * (those returned by {@link DatabaseClusterEngine.auroraMysql}).
 */
export class AuroraMysqlEngineVersion {
  /** Version "5.7.12". */
  public static readonly VER_5_7_12 = AuroraMysqlEngineVersion.builtIn_5_7('12', false);
  /** Version "5.7.mysql_aurora.2.03.2". */
  public static readonly VER_2_03_2 = AuroraMysqlEngineVersion.builtIn_5_7('2.03.2');
  /** Version "5.7.mysql_aurora.2.03.3". */
  public static readonly VER_2_03_3 = AuroraMysqlEngineVersion.builtIn_5_7('2.03.3');
  /** Version "5.7.mysql_aurora.2.03.4". */
  public static readonly VER_2_03_4 = AuroraMysqlEngineVersion.builtIn_5_7('2.03.4');
  /** Version "5.7.mysql_aurora.2.04.0". */
  public static readonly VER_2_04_0 = AuroraMysqlEngineVersion.builtIn_5_7('2.04.0');
  /** Version "5.7.mysql_aurora.2.04.1". */
  public static readonly VER_2_04_1 = AuroraMysqlEngineVersion.builtIn_5_7('2.04.1');
  /** Version "5.7.mysql_aurora.2.04.2". */
  public static readonly VER_2_04_2 = AuroraMysqlEngineVersion.builtIn_5_7('2.04.2');
  /** Version "5.7.mysql_aurora.2.04.3". */
  public static readonly VER_2_04_3 = AuroraMysqlEngineVersion.builtIn_5_7('2.04.3');
  /** Version "5.7.mysql_aurora.2.04.4". */
  public static readonly VER_2_04_4 = AuroraMysqlEngineVersion.builtIn_5_7('2.04.4');
  /** Version "5.7.mysql_aurora.2.04.5". */
  public static readonly VER_2_04_5 = AuroraMysqlEngineVersion.builtIn_5_7('2.04.5');
  /** Version "5.7.mysql_aurora.2.04.6". */
  public static readonly VER_2_04_6 = AuroraMysqlEngineVersion.builtIn_5_7('2.04.6');
  /** Version "5.7.mysql_aurora.2.04.7". */
  public static readonly VER_2_04_7 = AuroraMysqlEngineVersion.builtIn_5_7('2.04.7');
  /** Version "5.7.mysql_aurora.2.04.8". */
  public static readonly VER_2_04_8 = AuroraMysqlEngineVersion.builtIn_5_7('2.04.8');
  /** Version "5.7.mysql_aurora.2.05.0". */
  public static readonly VER_2_05_0 = AuroraMysqlEngineVersion.builtIn_5_7('2.05.0');
  /** Version "5.7.mysql_aurora.2.06.0". */
  public static readonly VER_2_06_0 = AuroraMysqlEngineVersion.builtIn_5_7('2.06.0');
  /** Version "5.7.mysql_aurora.2.07.0". */
  public static readonly VER_2_07_0 = AuroraMysqlEngineVersion.builtIn_5_7('2.07.0');
  /** Version "5.7.mysql_aurora.2.07.1". */
  public static readonly VER_2_07_1 = AuroraMysqlEngineVersion.builtIn_5_7('2.07.1');
  /** Version "5.7.mysql_aurora.2.07.2". */
  public static readonly VER_2_07_2 = AuroraMysqlEngineVersion.builtIn_5_7('2.07.2');
  /** Version "5.7.mysql_aurora.2.08.0". */
  public static readonly VER_2_08_0 = AuroraMysqlEngineVersion.builtIn_5_7('2.08.0');
  /** Version "5.7.mysql_aurora.2.08.1". */
  public static readonly VER_2_08_1 = AuroraMysqlEngineVersion.builtIn_5_7('2.08.1');

  /**
   * Create a new AuroraMysqlEngineVersion with an arbitrary version.
   *
   * @param auroraMysqlFullVersion the full version string,
   *   for example "5.7.mysql_aurora.2.78.3.6"
   * @param auroraMysqlMajorVersion the major version of the engine,
   *   defaults to "5.7"
   */
  public static of(auroraMysqlFullVersion: string, auroraMysqlMajorVersion?: string): AuroraMysqlEngineVersion {
    return new AuroraMysqlEngineVersion(auroraMysqlFullVersion, auroraMysqlMajorVersion);
  }

  private static builtIn_5_7(minorVersion: string, addStandardPrefix: boolean = true): AuroraMysqlEngineVersion {
    return new AuroraMysqlEngineVersion(`5.7.${addStandardPrefix ? 'mysql_aurora.' : ''}${minorVersion}`);
  }

  /** The full version string, for example, "5.7.mysql_aurora.1.78.3.6". */
  public readonly auroraMysqlFullVersion: string;
  /** The major version of the engine. Currently, it's always "5.7". */
  public readonly auroraMysqlMajorVersion: string;

  private constructor(auroraMysqlFullVersion: string, auroraMysqlMajorVersion: string = '5.7') {
    this.auroraMysqlFullVersion = auroraMysqlFullVersion;
    this.auroraMysqlMajorVersion = auroraMysqlMajorVersion;
  }
}

/**
 * Creation properties of the Aurora MySQL database cluster engine.
 * Used in {@link DatabaseClusterEngine.auroraMysql}.
 */
export interface AuroraMysqlClusterEngineProps {
  /** The version of the Aurora MySQL cluster engine. */
  readonly version: AuroraMysqlEngineVersion;
}

class AuroraMysqlClusterEngine extends MySqlClusterEngineBase {
  constructor(version?: AuroraMysqlEngineVersion) {
    super({
      engineType: 'aurora-mysql',
      engineVersion: version
        ? {
          fullVersion: version.auroraMysqlFullVersion,
          majorVersion: version.auroraMysqlMajorVersion,
        }
        : undefined,
      defaultMajorVersion: '5.7',
    });
  }

  protected defaultParameterGroup(scope: core.Construct): IParameterGroup | undefined {
    return ParameterGroup.fromParameterGroupName(scope, 'AuroraMySqlDatabaseClusterEngineDefaultParameterGroup',
      `default.${this.parameterGroupFamily}`);
  }
}

/**
 * The versions for the Aurora PostgreSQL cluster engine
 * (those returned by {@link DatabaseClusterEngine.auroraPostgres}).
 */
export class AuroraPostgresEngineVersion {
  /** Version "9.6.8". */
  public static readonly VER_9_6_8 = AuroraPostgresEngineVersion.of('9.6.8', '9.6');
  /** Version "9.6.9". */
  public static readonly VER_9_6_9 = AuroraPostgresEngineVersion.of('9.6.9', '9.6');
  /** Version "9.6.11". */
  public static readonly VER_9_6_11 = AuroraPostgresEngineVersion.of('9.6.11', '9.6');
  /** Version "9.6.12". */
  public static readonly VER_9_6_12 = AuroraPostgresEngineVersion.of('9.6.12', '9.6');
  /** Version "9.6.16". */
  public static readonly VER_9_6_16 = AuroraPostgresEngineVersion.of('9.6.16', '9.6');
  /** Version "9.6.17". */
  public static readonly VER_9_6_17 = AuroraPostgresEngineVersion.of('9.6.17', '9.6');
  /** Version "10.4". */
  public static readonly VER_10_4 = AuroraPostgresEngineVersion.of('10.4', '10');
  /** Version "10.5". */
  public static readonly VER_10_5 = AuroraPostgresEngineVersion.of('10.5', '10');
  /** Version "10.6". */
  public static readonly VER_10_6 = AuroraPostgresEngineVersion.of('10.6', '10');
  /** Version "10.7". */
  public static readonly VER_10_7 = AuroraPostgresEngineVersion.of('10.7', '10');
  /** Version "10.11". */
  public static readonly VER_10_11 = AuroraPostgresEngineVersion.of('10.11', '10');
  /** Version "10.12". */
  public static readonly VER_10_12 = AuroraPostgresEngineVersion.of('10.12', '10');
  /** Version "11.4". */
  public static readonly VER_11_4 = AuroraPostgresEngineVersion.of('11.4', '11');
  /** Version "11.6". */
  public static readonly VER_11_6 = AuroraPostgresEngineVersion.of('11.6', '11');
  /** Version "11.7". */
  public static readonly VER_11_7 = AuroraPostgresEngineVersion.of('11.7', '11');

  /**
   * Create a new AuroraPostgresEngineVersion with an arbitrary version.
   *
   * @param auroraPostgresFullVersion the full version string,
   *   for example "9.6.25.1"
   * @param auroraPostgresMajorVersion the major version of the engine,
   *   for example "9.6"
   */
  public static of(auroraPostgresFullVersion: string, auroraPostgresMajorVersion: string): AuroraPostgresEngineVersion {
    return new AuroraPostgresEngineVersion(auroraPostgresFullVersion, auroraPostgresMajorVersion);
  }

  /** The full version string, for example, "9.6.25.1". */
  public readonly auroraPostgresFullVersion: string;
  /** The major version of the engine, for example, "9.6". */
  public readonly auroraPostgresMajorVersion: string;

  private constructor(auroraPostgresFullVersion: string, auroraPostgresMajorVersion: string) {
    this.auroraPostgresFullVersion = auroraPostgresFullVersion;
    this.auroraPostgresMajorVersion = auroraPostgresMajorVersion;
  }
}

/**
 * Creation properties of the Aurora PostgreSQL database cluster engine.
 * Used in {@link DatabaseClusterEngine.auroraPostgres}.
 */
export interface AuroraPostgresClusterEngineProps {
  /** The version of the Aurora PostgreSQL cluster engine. */
  readonly version: AuroraPostgresEngineVersion;
}

class AuroraPostgresClusterEngine extends ClusterEngineBase {
  public readonly supportedLogTypes: string[] = ['postgresql'];

  constructor(version?: AuroraPostgresEngineVersion) {
    super({
      engineType: 'aurora-postgresql',
      singleUserRotationApplication: secretsmanager.SecretRotationApplication.POSTGRES_ROTATION_SINGLE_USER,
      multiUserRotationApplication: secretsmanager.SecretRotationApplication.POSTGRES_ROTATION_MULTI_USER,
      defaultPort: 5432,
      engineVersion: version
        ? {
          fullVersion: version.auroraPostgresFullVersion,
          majorVersion: version.auroraPostgresMajorVersion,
        }
        : undefined,
    });
  }

  protected defaultParameterGroup(scope: core.Construct): IParameterGroup | undefined {
    if (!this.parameterGroupFamily) {
      throw new Error('Could not create a new ParameterGroup for an unversioned aurora-postgresql cluster engine. ' +
        'Please either use a versioned engine, or pass an explicit ParameterGroup when creating the cluster');
    }
    return ParameterGroup.fromParameterGroupName(scope, 'AuroraPostgreSqlDatabaseClusterEngineDefaultParameterGroup',
      `default.${this.parameterGroupFamily}`);
  }
}

/**
 * A database cluster engine. Provides mapping to the serverless application
 * used for secret rotation.
 */
export class DatabaseClusterEngine {
  /**
   * The unversioned 'aurora' cluster engine.
   *
   * @deprecated using unversioned engines is an availability risk.
   *   We recommend using versioned engines created using the {@link aurora()} method
   */
  public static readonly AURORA: IClusterEngine = new AuroraClusterEngine();

  /**
   * The unversioned 'aurora-msql' cluster engine.
   *
   * @deprecated using unversioned engines is an availability risk.
   *   We recommend using versioned engines created using the {@link auroraMysql()} method
   */
  public static readonly AURORA_MYSQL: IClusterEngine = new AuroraMysqlClusterEngine();

  /**
   * The unversioned 'aurora-postgresql' cluster engine.
   *
   * @deprecated using unversioned engines is an availability risk.
   *   We recommend using versioned engines created using the {@link auroraPostgres()} method
   */
  public static readonly AURORA_POSTGRESQL: IClusterEngine = new AuroraPostgresClusterEngine();

  /** Creates a new plain Aurora database cluster engine. */
  public static aurora(props: AuroraClusterEngineProps): IClusterEngine {
    return new AuroraClusterEngine(props.version);
  }

  /** Creates a new Aurora MySQL database cluster engine. */
  public static auroraMysql(props: AuroraMysqlClusterEngineProps): IClusterEngine {
    return new AuroraMysqlClusterEngine(props.version);
  }

  /** Creates a new Aurora PostgreSQL database cluster engine. */
  public static auroraPostgres(props: AuroraPostgresClusterEngineProps): IClusterEngine {
    return new AuroraPostgresClusterEngine(props.version);
  }
}