rds-proxy lets you make use of IAM-based authentication to
AWS RDS instances from tools that don't natively support
that method of authentication.
To use it, set up a config file to point to the desired RDS Instance. When you run the proxy, it uses the standard methods of picking up an AWS credential (e.g. credentials file, environment variables, etc.).
Optionally, you can point the proxy at a different endpoint to make use of something like an SSH tunnel to a bastion host.
cargo install rds_proxy
rds_proxy -c <config file>
Upon success the proxy will be available for connections on
The connection string passed to the tool making use of the proxy can
include any relevant username that the backend RDS instance is expecting. The
password field is ignored.
If installation fails with
error: failed to download zeroize v1.4.1 — please ensure
cargo is up to date and try again.