resource "aws_rds_cluster" "msrv_rds_prod_01" {
  #checkov:skip=CKV_AWS_326: Ensure that RDS Aurora Clusters have backtracking enabled
  allocated_storage                   = 1
  allow_major_version_upgrade         = true
  apply_immediately                   = true
  availability_zones                  = ["us-east-1a", "us-east-1b", "us-east-1c"]
  backtrack_window                    = 0
  backup_retention_period             = 14
  cluster_identifier                  = "msrv-rds-prod-01"
  cluster_identifier_prefix           = null
  cluster_members                     = ["msrv-rds-prod-01", "msrv-rds-prod-01-ro"]
  copy_tags_to_snapshot               = true
  database_name                       = "msrv"
  db_cluster_instance_class           = null
  db_cluster_parameter_group_name     = "msrv-rds-prod-cluster-pg-80"
  db_instance_parameter_group_name    = null
  db_subnet_group_name                = "msrv-p-rds"
  deletion_protection                 = true
  enable_global_write_forwarding      = null
  enable_http_endpoint                = false
  enabled_cloudwatch_logs_exports     = ["audit", "error", "general", "slowquery"]
  engine                              = "aurora-mysql"
  engine_mode                         = "provisioned"
  engine_version                      = "8.0.mysql_aurora.3.08.2"
  final_snapshot_identifier           = null
  global_cluster_identifier           = null
  iam_database_authentication_enabled = false
  iam_roles                           = []
  iops                                = 0
  kms_key_id                          = "arn:aws:kms:us-east-1:361463692799:key/46219473-a94b-4e07-996a-6785ac63f844"
  manage_master_user_password         = null
  master_password                     = null # sensitive
  master_user_secret_kms_key_id       = null
  master_username                     = "msrvpdbuser"
  network_type                        = "IPV4"
  port                                = 3306
  preferred_backup_window             = "03:00-03:30"
  preferred_maintenance_window        = "sat:06:00-sat:06:30"
  replication_source_identifier       = null
  skip_final_snapshot                 = true
  snapshot_identifier                 = null
  source_region                       = null
  storage_encrypted                   = true
  storage_type                        = null
  tags                                = {}
  tags_all                            = {}
  vpc_security_group_ids              = ["sg-c898f8b3"]
}