[neptune] AssociatedRoles for CfnDBCluster

AssociatedRoles is now supported by CF templates for Amazon Neptune, but not available in the CDK (as of v1.62.0).

Use Case

Associating an IAM role with a Neptune’s CfnDBCluster.

Proposed Solution

Should be possible as AssociatedRoles is available for other types of DBCluster.

Other

• 👋 I may be able to implement this feature request
• ⚠️ This feature might incur a breaking change

---

This is a 🚀 Feature Request

[njlynch]

Ah, I see it now.

tl;dr - Here’s the fix to your code:

CfnDBCluster.DBClusterRoleProperty clusterRole = new CfnDBCluster.DBClusterRoleProperty.Builder().
    roleArn(associatedRole.getRoleArn()).
    build();

return CfnDBCluster.Builder.create(this, "NeptuneCluster").
    // ...
    associatedRoles(Arrays.asList(clusterRole)).
    // ...
    .build();

The associated roles isn’t just an IAM Role, it’s a specific type expected by CloudFormation: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-neptune-dbcluster.html#cfn-neptune-dbcluster-associatedroles

The Java docs are not helpful here, showing the type of associatedRoles as java.util.List<? extends java.lang.Object>. https://docs.aws.amazon.com/cdk/api/latest/java/software/amazon/awscdk/services/neptune/CfnDBCluster.Builder.html#associatedRoles-java.util.List- . What it should be is java.util.List<CfnDBCluster.DBClusterRoleProperty>. https://docs.aws.amazon.com/cdk/api/latest/java/software/amazon/awscdk/services/neptune/CfnDBCluster.DBClusterRoleProperty.html

If you look at the Typescript or Python docs, you’ll see slightly more helpful types:

• Typescript - Type: IResolvable | DBClusterRoleProperty | IResolvable[]
• Python - Union[IResolvable, List[Union[DBClusterRoleProperty, IResolvable]], None]

I am really intrigued by the bad error message you got, and by the poor Java docs in this example. I’ll follow up on our jsii project – responsible for both – and see if we can’t make some improvements.

Either way, hopefully this gets you up and running now.

[njlynch]

This is being done as part of #10201. Closing this out as a duplicate.