Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Passwordless authentication using IAM authentication to RDS for self-hosted / hybrid hasura plans #10208

Open
4raghumurthy opened this issue Apr 18, 2024 · 0 comments
Labels
k/enhancement New feature or improve an existing feature

Comments

@4raghumurthy
Copy link

Component
c/v3-engine

Is your proposal related to a problem?

This is a new feature request. Currently this functionality is possible with AWS Secrets via https://github.com/hasura/hasura-secret-refresh

Passwordless authentication is not supported presently for IAM authentication to RDS like PostgreSQL

Solution desired
What I am looking for is fully passwordless authentication using IAM authentication to RDS for self-hosted / hybrid hasura plans. For example, we should be able to have our hasura pods use IAM Roles for Service Accounts (IRSA) to authenticate to RDS PostgreSQL databases without having long lived credentials.

Describe alternatives you've considered

One option is add a Provider for AWS IAM in this repo
The current Providers at this link are rather limited to AWS Secrets Manager

Similar concept - can we leverage AWS SDK in hasura directly to configure IAM auth as an alternative?

@4raghumurthy 4raghumurthy added the k/enhancement New feature or improve an existing feature label Apr 18, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
k/enhancement New feature or improve an existing feature
Projects
None yet
Development

No branches or pull requests

1 participant