diff --git a/src/main/java/gyro/aws/rds/DbClusterParameterGroupFinder.java b/src/main/java/gyro/aws/rds/DbClusterParameterGroupFinder.java
index 2d4097f59..ce2334223 100644
--- a/src/main/java/gyro/aws/rds/DbClusterParameterGroupFinder.java
+++ b/src/main/java/gyro/aws/rds/DbClusterParameterGroupFinder.java
@@ -34,7 +34,7 @@
  *
  * .. code-block:: gyro
  *
- *    cluster-parameter-groups: $(external-query aws::db-cluster-parameter-group { name: 'cluster-parameter-group-example'})
+ *    db-cluster-parameter-group: $(external-query aws::db-cluster-parameter-group { name: 'cluster-parameter-group-example'})
  */
 @Type("db-cluster-parameter-group")
 public class DbClusterParameterGroupFinder extends AwsFinder<RdsClient, DBClusterParameterGroup, DbClusterParameterGroupResource> {
diff --git a/src/main/java/gyro/aws/rds/DbClusterResource.java b/src/main/java/gyro/aws/rds/DbClusterResource.java
index 89475a4db..7f5367acd 100644
--- a/src/main/java/gyro/aws/rds/DbClusterResource.java
+++ b/src/main/java/gyro/aws/rds/DbClusterResource.java
@@ -906,7 +906,8 @@ protected void doCreate(GyroUI ui, State state) {
                         .map(SecurityGroupResource::getId)
                         .collect(Collectors.toList()) : null)
                     .manageMasterUserPassword(getManageMasterUserPassword())
-                    .masterUserSecretKmsKeyId(getMasterUserSecretKmsKey().getId())
+                    .masterUserSecretKmsKeyId(
+                        getMasterUserSecretKmsKey() == null ? null : getMasterUserSecretKmsKey().getId())
                     .serverlessV2ScalingConfiguration(getServerlessV2ScalingConfiguration() != null ?
                         getServerlessV2ScalingConfiguration().toServerlessV2ScalingConfiguration() : null)
                     .storageType(getStorageType())
@@ -967,7 +968,8 @@ protected void doCreate(GyroUI ui, State state) {
                     .dbClusterInstanceClass(getDbClusterInstanceClass())
                     .iops(getIops())
                     .manageMasterUserPassword(getManageMasterUserPassword())
-                    .masterUserSecretKmsKeyId(getMasterUserSecretKmsKey().getId())
+                    .masterUserSecretKmsKeyId(
+                        getMasterUserSecretKmsKey() == null ? null : getMasterUserSecretKmsKey().getId())
                     .serverlessV2ScalingConfiguration(getServerlessV2ScalingConfiguration() != null ?
                         getServerlessV2ScalingConfiguration().toServerlessV2ScalingConfiguration() : null)
                     .storageType(getStorageType())
@@ -1063,7 +1065,8 @@ protected void doUpdate(Resource config, Set<String> changedProperties) {
                     .dbClusterInstanceClass(getDbClusterInstanceClass())
                     .iops(getIops())
                     .manageMasterUserPassword(getManageMasterUserPassword())
-                    .masterUserSecretKmsKeyId(getMasterUserSecretKmsKey().getId())
+                    .masterUserSecretKmsKeyId(
+                        getMasterUserSecretKmsKey() == null ? null : getMasterUserSecretKmsKey().getId())
                     .serverlessV2ScalingConfiguration(getServerlessV2ScalingConfiguration() != null ?
                         getServerlessV2ScalingConfiguration().toServerlessV2ScalingConfiguration() : null)
                     .storageType(getStorageType())