cube-js/cube

Add support for IAM database authentication to Amazon RDS

Open

#9,208 opened on Feb 11, 2025

View on GitHub
 (2 comments) (3 reactions) (0 assignees)Rust (19,563 stars) (1,965 forks)batch import
help wanted

Description

Is your feature request related to a problem? Please describe. Passwords are bad. Identity-based authentication is good. If the cube postgres/maria/mysql drivers supported IAM authentication that would be nice.

Describe the solution you'd like Just add some env variable like CUBEJS_DS_POSTGRES_DB_USE_AWS_IAM=true and it magically works.

Describe alternatives you've considered Stick with using passwords and have to stuff around with rotation and distribution of credentials etc.

Additional context RDS IAM auth docs

Contributor guide

Tech stack
postgresqlmysqlaws
Domain
backenddatabasecloudsecurity
Issue type
feature
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
3
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
3-5 days
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
fresh
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
mostly clear
Prerequisites
Basic knowledge of Cube environmentUnderstanding of AWS IAM authenticationFamiliarity with database drivers (PostgreSQL/MySQL)
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
40
Research direction
Investigate the Cube database driver implementations for PostgreSQL, MySQL, and MariaDB (likely in the `rust` directory or similar). Look for how connection strings are constructed and where an AWS IAM token could be generated. Consider using the AWS SDK for Rust to generate the authentication token. Review existing environment variable handling in Cube's configuration. Check the linked AWS IAM auth docs for token generation. There are 2 comments on the issue; review them for additional context.
Add support for IAM database authentication to Amazon RDS · cube-js/cube#9208 | Good First Issue