fix: enable IAM auth in the CF

block · Nov 28, 2024 · eaf0f51 · eaf0f51
1 parent 5e55167
commit eaf0f51
Showing 1 changed file with 8 additions and 7 deletions.
diff --git a/cmd/ftl-provisioner-cloudformation/postgres.go b/cmd/ftl-provisioner-cloudformation/postgres.go
@@ -27,13 +27,14 @@ func (p *PostgresTemplater) AddToTemplate(template *goformation.Template) error
 	clusterID := cloudformationResourceID(p.resourceID, "cluster")
 	instanceID := cloudformationResourceID(p.resourceID, "instance")
 	template.Resources[clusterID] = &rds.DBCluster{
-		Engine:                   ptr("aurora-postgresql"),
-		MasterUsername:           ptr("root"),
-		ManageMasterUserPassword: ptr(true),
-		DBSubnetGroupName:        ptr(p.config.DatabaseSubnetGroupARN),
-		VpcSecurityGroupIds:      []string{p.config.DatabaseSecurityGroup},
-		EngineMode:               ptr("provisioned"),
-		Port:                     ptr(5432),
+		Engine:                          ptr("aurora-postgresql"),
+		MasterUsername:                  ptr("root"),
+		ManageMasterUserPassword:        ptr(true),
+		DBSubnetGroupName:               ptr(p.config.DatabaseSubnetGroupARN),
+		VpcSecurityGroupIds:             []string{p.config.DatabaseSecurityGroup},
+		EngineMode:                      ptr("provisioned"),
+		Port:                            ptr(5432),
+		EnableIAMDatabaseAuthentication: ptr(true),
 		ServerlessV2ScalingConfiguration: &rds.DBCluster_ServerlessV2ScalingConfiguration{
 			MinCapacity: ptr(0.5),
 			MaxCapacity: ptr(10.0),