Support IAM auth for a database when connecting via CLI

[andrii-korotkov-verkada]

Description

Right now it looks like a username and password is needed to connect, e.g. https://airflow.apache.org/docs/apache-airflow/stable/howto/connection.html#connection-cli. It would be great to support IAM auth with auto-refreshing credentials.

Use case/motivation

Modern security practices include moving away from username/password to IAM auth, e.g. to avoid stale unrotated credentials and risks of leaking them. In some companies, access to the database via username/password might not even be supported anymore. To have CLI usable, IAM auth needs to be supported. Technically, people can get a temporary password for 15 min, but refreshing it manually would be pretty frustrating.

Related issues

No response

Are you willing to submit a PR?

• Yes I am willing to submit a PR!

Code of Conduct

• I agree to follow this project's Code of Conduct

[nathadfield]

@andrii-korotkov-verkada Airflow supports connections for many databases and services with a wide variety of authentication methods. Are you referring to something specific?

[potiuk]

Indeed. There is nothing to prevent using those mechanisms you mention @andrii-korotkov-verkada - for example Google And AWS provider already support what you advocate for. Please double check all the authentication mechanism. What exactly you think is not possible or problematic in the current setup ?