Using an RDS database with AWS secrets manager
If you are planning to use an RDS PostgreSQL database where the credentials are provided by the AWS Secret Manager, you can configure Accurids by setting the following variables:
Variable name | Value |
---|---|
spring.profiles.active |
rds-kms-postgres |
spring.datasource.url |
The ARN of the secret containing the credentials |
Accurids contacts the AWS Secret Manager by the usual authentication mechanisms of AWS.
E.g., you can set the environment variables AWS_ACCESS_KEY_ID
and AWS_SECRET_ACCESS_KEY
according to the used AWS role.
The URL of the database, the database name, the user, and the password are taken from the AWS secret.