How to Connect to Aurora PostgreSQL Database Using IAM Authentication and Node.js

You can use @aws-sdk/rds-signer to generate authentication token. After that, you can use auth token as password to connect to DB instance.

More info - https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/UsingWithRDS.IAMDBAuth.html

We able to successfully connect to the Aurora PostgreSQL from Lambda. We need to pass 'ssl:true' parameter while creating connection to Aurora PostgreSQL.

Steps to follow

1. Enable IAM Authentication on DB Cluster.
2. Create IAM Role/Permission with DB Connect Permission.
3. PostgreSQL User with rds_iam Role.
4. DB Cluster and Lambda on the Same VPC.

Node.JS code var aws = require('aws-sdk'); var pg = require('pg');

const dbRegion = 'eu-west-1'; const dbPort = 5432; const dbUsername = ‘iamuser’; const dbName = 'postgres'; const dbEndpoint = 'postgres.xxxxxxx.eu-west-1.rds.amazonaws.com ';

let pgSigner = new aws.RDS.Signer({ region: dbRegion , hostname: dbEndpoint, port: dbPort, username: dbUsername }); logger.log('debug','PostgreSQL signer',pgSigner); let pgToken = pgSigner.getAuthToken(); logger.log('debug','PostgreSQL Login token',pgToken);

var client = new pg.Client({ host: dbEndpoint, port: dbPort, user: dbUsername, database: dbName , password: pgToken ssl: true }); client.connect(); var result=client.query('create table xyz(id int);') result.then((data) => { console.log('data - ' + JSON.stringify(data)); }).catch((error) => { console.log('error'+ error); });