Thread: PG on AWS RDS and IAM authentication
As per https://forums.aws.amazon.com/thread.jspa?threadID=258822&tstart=0 there was no IAM authentication for PG on AWS RDS.(It is there for MySQL). However the link is a year old. Has it changed since then? Can we use IAM authentication for PG. Thanks
On 06/12/2018 08:45 AM, Ravi Krishna wrote: > > > > As per https://forums.aws.amazon.com/thread.jspa?threadID=258822&tstart=0 there was no IAM authentication for PG on AWSRDS. (It is there for MySQL). > However the link is a year old. Has it changed since then? Can we use IAM authentication for PG. IAM is a AWS feature, so you should probably talk to them to get the official word. The below would seem to indicate it is not possible: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/UsingWithRDS.IAMDBAuth.html > > Thanks > -- Adrian Klaver adrian.klaver@aklaver.com
We are working on adding IAM authentication for both RDS for PostgreSQL and Aurora PostgreSQL, and expect to release supportfor both soon. Thanks, -- Kevin Jernigan Senior Product Manager Amazon Aurora PostgreSQL 1-415-710-8828 (m) kmj@amazon.com 27 Melcher Street Boston, MA 02210 On 6/12/18, 1:11 PM, "Adrian Klaver" <adrian.klaver@aklaver.com> wrote: On 06/12/2018 08:45 AM, Ravi Krishna wrote: > > > > As per https://forums.aws.amazon.com/thread.jspa?threadID=258822&tstart=0 there was no IAM authentication for PG onAWS RDS. (It is there for MySQL). > However the link is a year old. Has it changed since then? Can we use IAM authentication for PG. IAM is a AWS feature, so you should probably talk to them to get the official word. The below would seem to indicate it is not possible: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/UsingWithRDS.IAMDBAuth.html > > Thanks > -- Adrian Klaver adrian.klaver@aklaver.com
On Tue, 12 Jun 2018 11:45:01 -0400 Ravi Krishna <sravikrishna3@gmail.com> wrote: > https://forums.aws.amazon.com/thread.jspa?threadID=258822&tstart=0 > there was no IAM authentication for PG on AWS RDS. (It is there for > MySQL). However the link is a year old. Has it changed since then? > Can we use IAM authentication for PG. Nothing to do with PG specifically, but you can use IAM to manage access to the server by host or VPC. The simplest way is to create a role and assign it to the hosts that are going to access the server. You can also create some accounts that are granted access to the RDS instances. If you need more help with this feel free to contact me outside of the list. -- Steven Lembark 1505 National Ave Workhorse Computing Rockford, IL 61103 lembark@wrkhors.com +1 888 359 3508