feat(rds): eliminating the need for explicit secret.grantRead() invokes when using DataAPI with Aurora cluster

[badmintoncryer]

Issue # (if applicable)

Closes #29362.

Reason for this change

As discussed there, we should invoke secret.grantRead() explicitly when using DataAPI with Aurora cluster.
Because it's inconvenient for users, I made secret.grantRead() be invoked within cluster.grantDataApiAccess().

Description of changes

• move cluster.secret from DatabaseClusterNew to DatabaseClusterBase to use it within DatabaseClusterBase.grantDataApiAccess()
• add secret.grantRead() in cluster.grantDataApiAccess()
• add secret property to DatabaseClusterAttributes

Points of concern

DatabaseClusterBase class is extended by ImportedDatabaseCluster class. Therefore, it is necessary to define ImportedDatabaseCluster.secret.

I simply added secret props to DatabaseClusterAttributes but I cannot believe this is the best way.
Other ways are..

• add secretArn to DatabaseClusterAttributes
• don't add secret info and ImportedDatabaseCluster.secret becomes always undefined

Description of how you validated changes

Checklist

• My code adheres to the CONTRIBUTING GUIDE and DESIGN GUIDELINES

---

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license

[lpizzinidev]

LGTM 👍

[GavinZZ]

LGTM

[mergify]

Thank you for contributing! Your pull request will be updated from main and then merged automatically (do not update manually, and be sure to allow changes to be pushed to your fork).

[mergify]

Thank you for contributing! Your pull request will be updated from main and then merged automatically (do not update manually, and be sure to allow changes to be pushed to your fork).

[aws-cdk-automation]

AWS CodeBuild CI Report

• CodeBuild project: AutoBuildv2Project1C6BFA3F-wQm2hXv2jqQv
• Commit ID: cb715a7
• Result: SUCCEEDED
• Build Logs (available for 30 days)

Powered by github-codebuild-logs, available on the AWS Serverless Application Repository

[mergify]

Thank you for contributing! Your pull request will be updated from main and then merged automatically (do not update manually, and be sure to allow changes to be pushed to your fork).