🚀 Feature: Authenticate to AWS RDS Postgres Database using IAM
Nobody has claimed this yet.
- Dominant language
- TypeScript
- Stars
- 59.6k
- Forks
- 5.8k
- Avg merge
- 1d 22h
- Merged PRs (30d)
- 49
Description
Is there an existing issue for this?
- I have searched the existing issues
Summary
Currently authentication to Postgres is via static database username and password. When using AWS RDS managed Postgres this authentication mechanism is not considered security best practice. Instead, short-lived tokens are preferred. See: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/UsingWithRDS.IAMDBAuth.html As an added benefit, using tokens enables connections from Plane to Postgres to be SSL/TLS encrypted.
Why should this be worked on?
In order for Plane Enterprise to meet the security requirements of many companies security best practices must be followed.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start with the AWS RDS IAM database authentication documentation linked in the issue, then identify how Plane currently configures static PostgreSQL username and password authentication. Define completion around short-lived IAM tokens and SSL/TLS-encrypted connections for AWS RDS PostgreSQL.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- aws, postgresql
- Domain
- authentication, cloud, databases
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100