Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Feature Request] : RDS IAM Authentication #1206

Open
teenwolf99 opened this issue Jan 13, 2025 · 2 comments
Open

[Feature Request] : RDS IAM Authentication #1206

teenwolf99 opened this issue Jan 13, 2025 · 2 comments

Comments

@teenwolf99
Copy link

Description

Currently, database connections are established using Host Details & credentials. I propose enhancing this functionality by adding support for AWS RDS IAM authentication. This would enable the use of IAM roles to manage access to RDS databases, improving security and eliminating the need for hardcoded credentials.

Proposed Feature

Implement a configuration option to enable RDS IAM authentication. Modify the database connection logic to generate and use IAM authentication tokens when this option is enabled. For implementation, consider leveraging AWS SDKs to generate RDS authentication tokens. Documentation on RDS IAM authentication can be found here.

Benefits

Enhanced security: IAM roles reduce the risk associated with managing and exposing static credentials.
Simplified credential management: Developers and operators can use AWS's IAM system instead of manually rotating credentials.

Additional context

I know this feature is specifically aiming to solve an issue for AWS customers only. I think it is warranted to support it in this tool because of the widespread use of AWS.

@teenwolf99 teenwolf99 changed the title RDS IAM Authentication [Feature Request] : RDS IAM Authentication Jan 13, 2025
@vjmax
Copy link

vjmax commented Feb 4, 2025

@Eugeny Can we get any update on this ? its really helpful for us if warpgate implement this feature.

@Eugeny
Copy link
Member

Eugeny commented Feb 4, 2025

@vjmax I'l just getting back to working on Warpgate after doing a lot of major changes in russh (its SSH backend library) - so the frequency of updates should pick up soon. However this specific feature is not a very high priority compared to others since it's still a narrow use case (both Warpgate and MySQL in AWS)

If your company uses Warpgate commercially and you'd like to fast track this feature, I offer both commercial support and feature development - if you're interested, feel free to reach out to me at [email protected]

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

3 participants