Skip to content

Support AWS RDS IAM Authentication for Redash database#7694

Open
winebarrel wants to merge 1 commit intogetredash:masterfrom
winebarrel:support-rds-iam-auth-for-redash-db
Open

Support AWS RDS IAM Authentication for Redash database#7694
winebarrel wants to merge 1 commit intogetredash:masterfrom
winebarrel:support-rds-iam-auth-for-redash-db

Conversation

@winebarrel
Copy link
Copy Markdown
Contributor

@winebarrel winebarrel commented Apr 17, 2026

What type of PR is this?

  • Refactor
  • Feature
  • Bug Fix
  • New Query Runner (Data Source)
  • New Alert Destination
  • Other

Description

This will enable the use of AWS RDS IAM authentication with Redash Database.
see https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/UsingWithRDS.IAMDBAuth.html

Using IAM authentication allows you to connect to the database more securely than with password authentication.

How is this tested?

  • Unit tests (pytest, jest)
  • E2E Tests (Cypress)
  • Manually
  • N/A

I added the following settings and confirmed that I could connect to the RDS for testing.

  • compose.yaml
  # REDASH_DATABASE_URL: "postgresql://postgres@postgres/postgres"
  REDASH_DATABASE_URL: "postgresql://iam_user@database-1.cluster-xxx.ap-northeast-1.rds.amazonaws.com/postgres"
  AWS_DEFAULT_REGION: ap-northeast-1
  REDASH_DATABASE_AWS_IAM_AUTH: "true"
  • .env
# NOTE: It is not a required environment variable.
AWS_ACCESS_KEY_ID=...
AWS_SECRET_ACCESS_KEY=...

スクリーンショット 2026-04-17 13 29 40スクリーンショット 2026-04-17 13 32 58

postgres=> select * from pg_stat_activity where usename = 'iam_user';
-[ RECORD 1 ]----+------------------------------
datid            | 5
datname          | postgres
pid              | 4432
leader_pid       |
usesysid         | 16455
usename          | iam_user
application_name |
client_addr      | xxx.xxx.xxx.xxx
client_hostname  |
client_port      | 55457
backend_start    | 2026-04-17 04:31:30.253999+00
xact_start       |
query_start      | 2026-04-17 04:34:25.004999+00
state_change     | 2026-04-17 04:34:25.005079+00
wait_event_type  | Client
wait_event       | ClientRead
state            | idle
backend_xid      |
backend_xmin     |
query_id         |
query            | ROLLBACK
backend_type     | client backend
-[ RECORD 2 ]----+------------------------------
datid            | 5
...

Related Tickets & Documents

Mobile & Desktop Screenshots/Recordings (if there are UI changes)

N/A

Copy link
Copy Markdown
Contributor

@cubic-dev-ai cubic-dev-ai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No issues found across 4 files

@winebarrel winebarrel force-pushed the support-rds-iam-auth-for-redash-db branch from 584229f to 3cb352b Compare April 18, 2026 04:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant