Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add option for RDS/Aurora Managed Master Passwords via Secrets Manager #166

Closed
fabianf92 opened this issue May 10, 2023 · 1 comment · Fixed by #221
Closed

Add option for RDS/Aurora Managed Master Passwords via Secrets Manager #166

fabianf92 opened this issue May 10, 2023 · 1 comment · Fixed by #221

Comments

@fabianf92
Copy link

fabianf92 commented May 10, 2023

Describe the Feature

We want to use RDS integration with secret manager so that master password will be managed by RDS and rotated by secret manager.
This option is available in Terraform by using the variable manage_master_user_password :
Set to true to allow RDS to manage the master user password in Secrets Manager. Cannot be set if master_password is provided.
Currently the cloudposse module does not allow to enable this feature.

Expected Behavior

The module allows to enable managed user password feature in RDS.

Use Case

Managed secrets are more secure and easy to use.

Describe Ideal Solution

  • Add a variable to enable managed master user password option in RDS.
  • Add output block that contains the the secret ARN (see master_user_secret reference in the terraform docs).

Alternatives Considered

No response

Additional Context

No response

@rstml
Copy link

rstml commented Aug 24, 2023

Any plans for this? This should be quite simple to add - just pass through 2 additional variables?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
2 participants