<< Click to Display Table of Contents >> Raynet One Data Hub > 2026.4 > Connectors > Alphabetic Connector List > Amazon Relational Database Service > Connector Parameters  Authentication

The AWS RDS connector supports two authentication methods: Access Key & Secret Key and Web Identity Federation (OIDC). The authentication method is selected using the AUTHENTICATION METHOD parameter.

 

Authentication Method

This parameter specifies the authentication method used to connect to AWS. The selected method determines which additional parameters are required.

 

 

Access Key & Secret Key

The following parameters are required when using the Access Key & Secret Key authentication method.

 

Access Key

This parameter contains the Access Key that is used for the connection to AWS. The connector uses these credentials to perform the initial authentication to AWS and then automatically obtains and renews session credentials for the duration of the execution.

 

 

How to obtain the credentials is described in the official documentation. It is recommended to generate credentials tailored to this connector via the IAM Console.

 

Secret Key

This parameter contains the Secret Key that is used for authentication with AWS together with the Access Key.

 

 

Web Identity Federation (OIDC)

The following parameters are required when using the Web Identity Federation (OIDC) authentication method. This method allows the connector to authenticate using an external OIDC identity provider, without the need to manage long-lived AWS access keys.

 

Client ID

This parameter specifies the OIDC client ID used to obtain a web identity token from the identity provider.

 

 

Client Secret

This parameter specifies the OIDC client secret used to obtain a web identity token from the identity provider.

 

 

Identity Provider Token Endpoint URL

This parameter specifies the OIDC token endpoint URL of the identity provider. The connector uses this URL to obtain a web identity token, which is then exchanged for temporary AWS credentials via the AWS Security Token Service (STS).

 

 

AWS Role ARN

This parameter specifies the Amazon Resource Name (ARN) of the AWS IAM role to assume using Web Identity Federation. The connector assumes this role after obtaining the web identity token from the identity provider.

 

 

Session Duration (seconds)

This parameter specifies the duration in seconds for the assumed role session. The value must be between 900 and 43200 seconds. The default value is 3600 seconds (1 hour).

 

 

Shared Parameters

The following parameters apply to both authentication methods.

 

Master-Account Assume Role ARN Chain

This parameter specifies an optional role ARN chain for the master account. Use the AWS Security Token Service (STS) to assume the given roles one after another. This parameter is optional.

 

 

External ID

This parameter specifies an optional external ID for cross-account access with the AWS Security Token Service (STS). This parameter is optional.