The ISecret interface that is produced by the RDS fromGeneratedSecret method does not implement addReplicaRegion.

Use Case

DB credentials should always be replicated across regions along with DB snapshots to aid in DR/BC. When creating a new RDS cluster, the auto-generated credentials should be replicated across multiple regions.

Proposed Solution

Either fromGeneratedSecret should allow you to access a full Secret object, or addReplicaRegion should be added to ISecret, in a similar way to addRotationSchedule

Other

I tagged both secretsmanager and rds as I'm not sure which side needs to implement this :)

• 👋 I may be able to implement this feature request
• ⚠️ This feature might incur a breaking change

This is a 🚀 Feature Request