TL;DR: A bundle you would install in your RDS-powered Symfony application to add seamless support for IAM authentication or managed, automatically rotated password to improve your baseline security posture.
A Symfony bundle that registers and configures tacticmedia/rds-auth-middleware, which selects the database credential for an Amazon RDS instance at connect time using the following logic:
- If
iam_usernameis set: connect as that user with an RDS IAM authentication token as the password. - If
secret_arnis set: connect with the configured password; when the database rejects it, re-read the current password from Secrets Manager, retry once, and dispatch aConfiguredPasswordOutdatedevent so the application can alert or redeploy. - Neither set: the connection parameters stay unchanged.
Every option defaults to an environment variable, so one application image runs unchanged in every environment, with either authentication mode or none.
composer require tacticmedia/rds-auth-bundleSee Installation for bundle registration.
- Installation - requirements, Composer setup, bundle registration
- Configuration - option reference, environment-variable defaults, examples for each mode
- The credential cache - cache pool behavior, APCu setup, token lifetime
- The ConfiguredPasswordOutdated event - firing conditions, payload, listener registration
- The Doctrine DBAL configuration - what the middleware changes at connect time
- Bundle internals - services, middleware registration, package boundary
- Development and testing - commands, kernel test pattern, CI
Non-LLM-slop contributions and issues are most definitely welcome.
MIT. See LICENSE.
This package is brought to you by Tactic Media, a South Australian software development business.
We love to help businesses become more efficient by automating tasks that shouldn't have been done by a human in the first place.
Head over to our website to check out what we do, and if you think we can help you give your employees more time to spend on something more creative, let's talk