Dsql

Aurora DSQL has no database passwords, only short-lived IAM tokens, while Grafana expects a static PostgreSQL password. This article shows how a scheduled Lambda refreshes the token through the Grafana API, with a read-only user and least privilege access to keep the bill under control.