1. Login to AWS Console: Go to the AWS Management Console and login with your credentials.
2. Navigate to RDS Service: From the console dashboard, navigate to the RDS service by clicking on the “Services” dropdown and selecting “RDS” under the Database category.
3. Select the RDS Instance: In the RDS dashboard, select the RDS instance for which you want to enable IAM DB authentication.
4. Modify the Instance: Click on the instance name to open the instance details. Then, click on the “Modify” button to make changes to the instance settings.
5. Enable IAM DB Authentication: Scroll down to the “Additional configuration” section in the Modify DB Instance page. Look for the “IAM DB authentication” option and set it to “Enable” by checking the box next to it.
6. Apply the Changes: Scroll to the bottom of the page and click on the “Continue” button to proceed with modifying the instance.
7. Review and Apply Changes: Review the changes you are about to make and click on the “Modify DB Instance” button to apply the changes.
8. Verify IAM DB Authentication: Once the modification is complete, go back to the RDS instance details page and verify that IAM DB authentication is now enabled for the instance.

​

1. Enable IAM DB Authentication using the AWS CLI:

aws rds modify-db-instance \
    --db-instance-identifier <your-db-instance-identifier> \
    --enable-iam-database-authentication

2. Check the status of IAM DB Authentication:

aws rds describe-db-instances \
    --db-instance-identifier <your-db-instance-identifier> \
    --query 'DBInstances[0].[IAMDatabaseAuthenticationEnabled]'

3. Verify IAM DB Authentication in AWS Management Console:
   • Go to the AWS Management Console and navigate to the RDS service.
   • Select your RDS instance.
   • In the “Configuration” section, verify that IAM DB Authentication is enabled.

1. Install Boto3:

pip install boto3

2. Create a Python script with the following code:

import boto3

# Specify the region where your RDS instance is located
region = 'us-east-1'

# Specify the identifier of your RDS instance
db_instance_identifier = 'your-db-instance-identifier'

# Create an RDS client
client = boto3.client('rds', region_name=region)

# Enable IAM DB authentication for the specified RDS instance
response = client.modify_db_instance(
    DBInstanceIdentifier=db_instance_identifier,
    EnableIAMDatabaseAuthentication=True
)

print(f"IAM DB authentication enabled for RDS instance {db_instance_identifier}")

3. Replace 'us-east-1' with the appropriate region where your RDS instance is located and 'your-db-instance-identifier' with the actual identifier of your RDS instance.
4. Run the Python script. This will enable IAM DB authentication for the specified RDS instance.

resource "aws_db_instance" "THIS_DB" {
  # Substitute THIS_DB with your resource name and configure all required arguments:
  # identifier, engine, instance_class, allocated_storage, username, password, etc.
  identifier = "DB_INSTANCE_IDENTIFIER" # replace with your DB instance identifier

  engine         = "mysql"              # or "postgres", must be a supported engine/version
  instance_class = "db.t3.medium"

  # Enable IAM Database Authentication (matches: --enable-iam-database-authentication)
  iam_database_authentication_enabled = true

  # ...other existing configuration...
}

• ~ iam_database_authentication_enabled: false => true