Enable rds_iam authentication

Author: powersurge360

Gemfile

@@ -83,6 +83,8 @@ gem "standard", ">= 1.35.1"
 gem "sentry-ruby"
 gem "sentry-rails"
 
+gem "pg-aws_rds_iam"
+
 gem "openssl", ">= 3.3.1"
 
 gem "intercom-rails", "~> 1.0"

Gemfile.lock

@@ -107,6 +107,9 @@ GEM
     aws-sdk-kms (1.118.0)
       aws-sdk-core (~> 3, >= 3.239.1)
       aws-sigv4 (~> 1.5)
+    aws-sdk-rds (1.302.0)
+      aws-sdk-core (~> 3, >= 3.239.1)
+      aws-sigv4 (~> 1.5)
     aws-sdk-s3 (1.209.0)
       aws-sdk-core (~> 3, >= 3.234.0)
       aws-sdk-kms (~> 1)
@@ -317,6 +320,9 @@ GEM
     pg (1.6.2-x86_64-darwin)
     pg (1.6.2-x86_64-linux)
     pg (1.6.2-x86_64-linux-musl)
+    pg-aws_rds_iam (0.7.0)
+      aws-sdk-rds (~> 1.0)
+      pg (~> 1.1)
     phony (2.22.5)
     pp (0.6.3)
       prettyprint
@@ -599,6 +605,7 @@ DEPENDENCIES
   mailgun-ruby
   openssl (>= 3.3.1)
   pg
+  pg-aws_rds_iam
   phony
   propshaft
   pry-byebug

config/database.yml

@@ -24,8 +24,8 @@ deploy_default: &deploy_default
   database: prior_year_access
   host: <%= ENV["DATABASE_HOST"] if ENV["DATABASE_USER"] %>
   username: <%= ENV["DATABASE_USER"] if ENV["DATABASE_USER"] %>
-  password: <%= ENV["DATABASE_PASSWORD"] if ENV["DATABASE_PASSWORD"] %>
   url: <%= ENV["DATABASE_URL"] %>
+  aws_rds_iam_auth_token_generator: default
 
 # Store production database in the storage/ directory, which by default
 # is mounted as a persistent Docker volume in config/deploy.yml.
@@ -43,4 +43,4 @@ production:
     migrations_paths: db/cable_migrate
 
 staging:
-  <<: *deploy_default
+  <<: *deploy_default