search

fleetdm / fleet

Open-source platform for IT, security, and infrastructure teams. (Linux, macOS, Chrome, Windows, cloud, data center)
https://fleetdm.com
Other
2.92k stars 405 forks source link

RDS IAM Authentication #1817

Open edwardsb opened 3 years ago

edwardsb commented 3 years ago

Goal

Users who run Fleet inside of AWS are likely using AWS RDS as their managed database solution. To create further adoption and ease of use inside of cloud-native environments Fleet should be able to authenticate to RDS using IAM access. See https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/UsingWithRDS.IAMDBAuth.html for details.

How?

Using the aws go sdk its possible to generate authentication tokens. This feature could be enabled by adding a configuration option to attempt IAM access when the database connection starts up.

edwardsb commented 2 years ago

{"mysql":"could not connect to db: x509: certificate signed by unknown authority, sleeping 3s","ts":"2022-02-16T13:56:07.203299221Z"}

ChefAustin commented 1 month ago

FWIW: Would love to see this come to fruition!