Cloud Database Integration

Amazon RDS

Connect TigerIdentity to Amazon RDS for automated database access management, IAM-based authentication, and just-in-time privilege provisioning.

Book a Demo View Documentation
Capabilities

Key features

RDS Instance Discovery

Automatically discover RDS instances across AWS accounts and regions.

Multi-Engine Support

Support for PostgreSQL, MySQL, MariaDB, Oracle, and SQL Server on RDS.

IAM Authentication

Leverage AWS IAM database authentication for passwordless access to RDS.

Just-In-Time Access

Provision temporary database users with time-bound privileges via IAM tokens.

Audit Log Ingestion

Ingest RDS CloudWatch logs and Enhanced Monitoring metrics for access tracking.

Secret Rotation

Integrate with AWS Secrets Manager for automated credential rotation.

How it works

Connect Amazon RDS in four steps.

01

Discover

TigerIdentity scans AWS accounts to discover RDS instances and their IAM authentication status.

02

Connect

Configure IAM roles for database access and integrate with Secrets Manager for credential management.

03

Provision

Grant just-in-time database access using IAM authentication tokens with automatic expiration.

Cloud Database Integration

Real-time identity signals from Amazon RDS.

Every event, action, and change from Amazon RDS feeds the TigerIdentity policy engine and TIDR baseline in real time.

< 50 ms

Cloud Database Integration

Setup

Configuration example

connector.yaml
connector:
  type: amazon-rds
  name: "rds-production"

  config:
    aws_region: "us-east-1"
    role_arn: "${AWS_CONNECTOR_ROLE_ARN}"

  discovery:
    scan_regions:
      - us-east-1
      - us-west-2
    instance_tags:
      Environment: production
      ManagedBy: tigeridentity

  sync:
    instances: true
    database_users: true
    iam_auth_enabled: true

  audit:
    cloudwatch_logs: true
    performance_insights: true

  mapping:
    instance_attributes:
      - rds: DBInstanceIdentifier
        tiger: resource_id
      - rds: Engine
        tiger: database_type
Use cases

Common use cases

Cloud Database Governance

Centralize access control for RDS instances across multiple AWS accounts and regions.

Passwordless Database Access

Use IAM authentication to eliminate static database passwords and enable just-in-time access.

Cross-Account RDS Access

Grant temporary access to RDS instances in different AWS accounts with automatic cleanup.

Compliance Reporting

Generate audit trails of database access across your RDS fleet.

Ready to connect Amazon RDS?

See how TigerIdentity integrates with your Amazon RDS environment in a personalized demo.

Book a Demo View Documentation