cube-js/cube

Add support for IAM database authentication to Amazon RDS

Open

#9,208 创建于 2025年2月11日

在 GitHub 查看
 (2 评论) (3 反应) (0 负责人)Rust (19,563 star) (1,965 fork)batch import
help wanted

描述

Is your feature request related to a problem? Please describe. Passwords are bad. Identity-based authentication is good. If the cube postgres/maria/mysql drivers supported IAM authentication that would be nice.

Describe the solution you'd like Just add some env variable like CUBEJS_DS_POSTGRES_DB_USE_AWS_IAM=true and it magically works.

Describe alternatives you've considered Stick with using passwords and have to stuff around with rotation and distribution of credentials etc.

Additional context RDS IAM auth docs

贡献者指南

技术栈
postgresqlmysqlaws
领域
backenddatabasecloudsecurity
议题类型
feature
难度面向新贡献者的预计实现难度，1 表示很小改动，5 表示专家级工作。
3
预计时间有经验贡献者完成调查、实现、测试并准备 pull request 的粗略时间范围。
3-5 days
活动状态议题当前的可参与程度：新鲜、活跃、陈旧、阻塞或等待维护者输入。
fresh
清晰度议题是否清楚说明期望改动、验收标准和下一步。
mostly clear
前置要求
Basic knowledge of Cube environmentUnderstanding of AWS IAM authenticationFamiliarity with database drivers (PostgreSQL/MySQL)
新手友好度1-100 的估计分数，表示该议题对首次贡献者的友好程度。
40
研究方向
Investigate the Cube database driver implementations for PostgreSQL, MySQL, and MariaDB (likely in the `rust` directory or similar). Look for how connection strings are constructed and where an AWS IAM token could be generated. Consider using the AWS SDK for Rust to generate the authentication token. Review existing environment variable handling in Cube's configuration. Check the linked AWS IAM auth docs for token generation. There are 2 comments on the issue; review them for additional context.