AWS RDS Proxy Plugin
This release adds an AWS RDS proxy plugin:
granted rds proxyThis plugin allows Granted to broker a connection to an AWS RDS database over AWS SSM Session Manager. The connection is routed through a Common Fate AWS Proxy which captures audit logs of the SQL statements executed.
The plugin uses the Common Fate control plane APIs to determine which databases a user is authorized to access, so to use this plugin a Common Fate instance is required. Email us at hello@commonfate.io if you'd like to test this and we'll set up an instance for you.
You can read more about the plugin here in our documentation.
Currently, plugins are compiled into the main Granted binary. We intend to shift to a model similar to the gh GitHub CLI where plugins can be independently versioned to Granted.
Fixes
A big thankyou to first-time contributor @dnrce for fixing the output message when credentials are exported with assume --export.
What's Changed
- Output actual credentials file path when exporting by @dnrce in #708
- Add AWS RDS Proxy plugin by @JoshuaWilkes in #709
New Contributors
Full Changelog: v0.30.0...v0.31.0