Skip to content

Using an RDS database with AWS secrets manager

If you are planning to use an RDS PostgreSQL database where the credentials are provided by the AWS Secret Manager, you can configure Accurids by setting the following variables:

Variable name Value
spring.profiles.active rds-kms-postgres
spring.datasource.url The ARN of the secret containing the credentials

Accurids contacts the AWS Secret Manager by the usual authentication mechanisms of AWS. E.g., you can set the environment variables AWS_ACCESS_KEY_ID and AWS_SECRET_ACCESS_KEY according to the used AWS role.

The URL of the database, the database name, the user, and the password are taken from the AWS secret.