AWS.RDS.signer + TypeORM

Hi,

I was wondering if you could provide some guidance. I’m using TypeORM and I’m trying to connect to an RDS Aurora MySQL instance using IAM authentication. I’m not sure if I have the correct syntax in the authPlugins object. I’m getting the following error:

Access denied for user ‘xxxxxxxxxx’@‘yyyyyyyyyyy’ (using password: YES)

Aurora MySQL engine is 5.7.mysql_aurora.2.04.5

    const signer = new AWS.RDS.Signer({
      region,
      username,
      hostname,
      port: 3306
    });

createConnection({
      host,
      username,
      database,
      entities: [..., ....],
      ssl: 'Amazon RDS',
      extra: {
        authPlugins: {
          mysql_clear_password: () => () =>
            signer.getAuthToken({
              username,
              region,
              hostname,
              port: 3306
            })
        }
      }
    });

Issue Analytics

State:
Created 4 years ago
Reactions:4
Comments:9 (2 by maintainers)

Top GitHub Comments

1reaction

cdavis21commented, Feb 26, 2020

Thank you for your quick response. When I try what you have suggested above I receive:

Error: Server requests authentication using unknown plugin mysql_clear_password. See TODO: add plugins doco here on how to configure or author authentication plugins.

When I try the below I receive the Access denied for user ‘xxxxxxxxxx’@‘yyyyyyyyyyy’ (using password: YES) still.

I’m thinking because I’m using TypeORM and not the mysql client directly, the syntax differs? Here is another article using the deprecated authSwitchHandler method with TypeORM https://tech.bitbank.cc/typeorm-iam-rds/ (code in english, article in Japanese)

createConnection({
      host,
      username,
      database,
      entities: [..., ....],
      ssl: 'Amazon RDS',
      extra: {
        authPlugins: {
          mysql_clear_password: rdsSignerAuth
        }
      }
    });

0reactions

antoniot13commented, Jul 12, 2021

Any updates on this ?