AWS.RDS.signer + TypeORM

Hi,

I was wondering if you could provide some guidance. I’m using TypeORM and I’m trying to connect to an RDS Aurora MySQL instance using IAM authentication. I’m not sure if I have the correct syntax in the authPlugins object. I’m getting the following error:

Access denied for user ‘xxxxxxxxxx’@‘yyyyyyyyyyy’ (using password: YES)

Aurora MySQL engine is 5.7.mysql_aurora.2.04.5

    const signer = new AWS.RDS.Signer({
      region,
      username,
      hostname,
      port: 3306
    });

createConnection({
      host,
      username,
      database,
      entities: [..., ....],
      ssl: 'Amazon RDS',
      extra: {
        authPlugins: {
          mysql_clear_password: () => () =>
            signer.getAuthToken({
              username,
              region,
              hostname,
              port: 3306
            })
        }
      }
    });

[cdavis21]

Thank you for your quick response. When I try what you have suggested above I receive:

Error: Server requests authentication using unknown plugin mysql_clear_password. See TODO: add plugins doco here on how to configure or author authentication plugins.

When I try the below I receive the Access denied for user ‘xxxxxxxxxx’@‘yyyyyyyyyyy’ (using password: YES) still.

I’m thinking because I’m using TypeORM and not the mysql client directly, the syntax differs? Here is another article using the deprecated authSwitchHandler method with TypeORM https://tech.bitbank.cc/typeorm-iam-rds/ (code in english, article in Japanese)

createConnection({
      host,
      username,
      database,
      entities: [..., ....],
      ssl: 'Amazon RDS',
      extra: {
        authPlugins: {
          mysql_clear_password: rdsSignerAuth
        }
      }
    });

[antoniot13]

Any updates on this ?