rds-proxy lets you make use of IAM-based authentication to
AWS RDS instances from tools that don't natively support
that method of authentication.
To use it, set up a config file to point to the desired RDS Instance. When you run the proxy, it uses the standard methods of picking up an AWS credential (e.g. credentials file, environment variables, etc.).
Optionally, you can point the proxy at a different endpoint to make use of something like an SSH tunnel to a bastion host.
See sample configs for a direct connection or via an SSH Tunnel
Installation: cargo install rds_proxy
Usage: rds_proxy -c <config file>
Upon success the proxy will be available for connections on 127.0.0.1:5435.
The connection string passed to the tool making use of the proxy can
include any relevant username that the backend RDS instance is expecting. The
password field is ignored.
If installation fails with error: failed to download zeroize v1.4.1 — please ensure cargo is up to date and try again.