Aws-cdk: RDS: Support enabling IAM DATABASE Authentication

[RomainMuller]

The current RDS constructs do not surface the IAM DB Authentication configuration, making it unusable without resorting to escape hatches.

---

https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/UsingWithRDS.IAMDBAuth.html

[RomainMuller]

I have a WIP for this, but the permission-granting API for the grantConnect primitive requires the "resource ID" of the DBInstances, which isn't surfaced by CloudFormation (hence requires a CustomResource).

[saltman424]

+1

[gbooth27]

any news on this?

[skinny85]

@RomainMuller did you submit your WiP anywhere?

[RomainMuller]

@skinny85 - nope I never managed to finish that completely; and the underlying APIs changed quite a bit in between... so it's as good as not existent.

[nija-at]

Work left here is to build a grantConnect() method that will grant an IAM IPrincipal with the permissions to connect. Any calls to grantConnect() should automatically turn set the iamAuthentication property, if not already.