rds-proxy lets you make use of IAM-based authentication to AWS RDS instances from tools that don't natively support that method of authentication.

To use it, set up a config file to point to the desired RDS Instance. When you run the proxy, it uses the standard methods of picking up an AWS credential (e.g. credentials file, environment variables, etc.).

Optionally, you can point the proxy at a different endpoint to make use of something like an SSH tunnel to a bastion host.

See sample configs for a direct connection or via an SSH Tunnel

Installation: cargo install rds_proxy

Usage: rds_proxy -c <config file>

Upon success the proxy will be available for connections on 127.0.0.1:5435. The connection string passed to the tool making use of the proxy can include any relevant username that the backend RDS instance is expecting. The password field is ignored.

If installation fails with error: failed to download zeroize v1.4.1 — please ensure cargo is up to date and try again.