apache / apache/airflow

Support IAM auth when using a managed PostgreSQL from AWS or others

Open
#44,735 1 comment 0 reactions 0 assignees View on GitHub
area:MetaDB kind:feature needs-triage
Dominant language
Python
Stars
46.9k
Forks
17.8k
Avg merge
2d 10h
Merged PRs (30d)
483

Description

### Description

Existing database setup seems to only suggest username/password auth for Postgres https://airflow.apache.org/docs/apache-airflow/stable/howto/set-up-database.html#setting-up-a-postgresql-database. It would be great to support IAM auth as well.

### Use case/motivation

Modern security practices include moving away from username/password auth, e.g. to avoid stale credentials and potential credentials leaks. Some companies may not even support connecting with username/password anymore.

### Related issues

https://github.com/apache/airflow/issues/31759

### Are you willing to submit a PR?

- [ ] Yes I am willing to submit a PR!

### Code of Conduct

- [X] I agree to follow this project's [Code of Conduct](https://github.com/apache/airflow/blob/main/CODE_OF_CONDUCT.md)

Contributor guide

Open the contributing guide

Research direction

Start with the PostgreSQL database setup documentation linked in the issue and read related issue #31759 for existing context. Determine the scope of IAM authentication for managed PostgreSQL providers such as AWS, including the affected Airflow database connection paths. Done should include agreed support and documentation for the supported authentication flow, with validation for the relevant providers.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws, postgresql, python
Domain
authentication, cloud, databases
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.