diff --git a/packages/aws-cdk-lib/aws-rds/lib/cluster.ts b/packages/aws-cdk-lib/aws-rds/lib/cluster.ts
index c6ce94cc65d5d..2c68c466b13be 100644
--- a/packages/aws-cdk-lib/aws-rds/lib/cluster.ts
+++ b/packages/aws-cdk-lib/aws-rds/lib/cluster.ts
@@ -1231,6 +1231,7 @@ export class DatabaseCluster extends DatabaseClusterNew {
 
       this.clusterIdentifier = cluster.ref;
       this.clusterResourceIdentifier = cluster.attrDbClusterResourceId;
+      this.secret = secretsmanager.Secret.fromSecretCompleteArn(this, 'DbClusterSecret', cluster.attrMasterUserSecretSecretArn);
     }
 
     // create a number token that represents the port of the cluster