how to secure username and password through redshift connection string

Question

I have created Redshift data source from Athena Console using Lambda Connector.
while giving configurations in Lambda connector, we need to give Redshift JDBC URL which is supporting the following format:
redshift://jdbc:redshift://?user=&password=

Issue is: I don't want to hardcode the username and password. So I stored user and pass in secret manager and using those variables here, I tried following ways but none of them is working. please let me know other way how i can store secrets in redshift url mentioned above:

my ways: (example username = abc, password = xyz, and correct jdbc url)

1. redshift://jdbc:redshift://?username=${username}&password=${password}
2. redshift://jdbc:redshift://?${secret name}

Lambda has permission to read data from secret manager as well.

please let me know as i dont want to hardcode my credentials

Answer

Hi,

As per this [documentation](https://docs.aws.amazon.com/athena/latest/ug/connectors-redshift.html), You can put the name of a secret in AWS Secrets Manager in your JDBC connection string. The connector replaces the secret name with the username and password values from Secrets Manager.

There are also couple of examples mentioned in the document:

Example connection string with secret name
The following string has the secret name ${Test/RDS/ Redshift1}.

```
redshift://jdbc:redshift://redshift1.host:3306/default?...&${Test/RDS/Redshift1}&...
```

The connector uses the secret name to retrieve secrets and provide the user name and password, as in the following example.

```
redshift://jdbc:redshift://redshift1.host:3306/default?...&user=sample2&password=sample2&...
```

Currently, the Redshift connector recognizes the user and password JDBC properties.

Hope this is helpful!

Thanks,
Rama

how to secure username and password through redshift connection string

Relevant content