diff --git a/common/lib/authentication/iam_authentication_plugin.ts b/common/lib/authentication/iam_authentication_plugin.ts
index fdcf5a62..e26f8296 100644
--- a/common/lib/authentication/iam_authentication_plugin.ts
+++ b/common/lib/authentication/iam_authentication_plugin.ts
@@ -90,7 +90,7 @@ export class IamAuthenticationPlugin extends AbstractConnectionPlugin {
     this.pluginService.updateConfigWithProperties(props);
 
     try {
-      return connectFunc();
+      return await connectFunc();
     } catch (e) {
       logger.debug(Messages.get("IamAuthenticationPlugin.connectException", (e as Error).message));
       if (!this.pluginService.isLoginError(e as Error) || !isCachedToken) {
diff --git a/tests/integration/container/tests/iam_authentication.test.ts b/tests/integration/container/tests/iam_authentication.test.ts
new file mode 100644
index 00000000..f2a85c9a
--- /dev/null
+++ b/tests/integration/container/tests/iam_authentication.test.ts
@@ -0,0 +1,160 @@
+/*
+  Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ 
+  Licensed under the Apache License, Version 2.0 (the "License").
+  You may not use this file except in compliance with the License.
+  You may obtain a copy of the License at
+ 
+  http://www.apache.org/licenses/LICENSE-2.0
+ 
+  Unless required by applicable law or agreed to in writing, software
+  distributed under the License is distributed on an "AS IS" BASIS,
+  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  See the License for the specific language governing permissions and
+  limitations under the License.
+*/
+
+import { TestEnvironment } from "./utils/test_environment";
+import { DriverHelper } from "./utils/driver_helper";
+import { AwsWrapperError } from "aws-wrapper-common-lib/lib/utils/errors";
+import { promisify } from "util";
+import { lookup } from "dns";
+import { readFileSync } from "fs";
+import { AwsPGClient } from "pg-wrapper";
+import { AwsMySQLClient } from "mysql-wrapper";
+import { IamAuthenticationPlugin } from "aws-wrapper-common-lib/lib/authentication/iam_authentication_plugin";
+import { logger } from "aws-wrapper-common-lib/logutils";
+
+let env: TestEnvironment;
+let driver;
+let initClientFunc: (props: any) => any;
+
+const sslCertificate = {
+  ca: readFileSync("/app/global-bundle.pem").toString()
+};
+
+function getIpAddress(host: string) {
+  return promisify(lookup)(host, {});
+}
+
+async function initDefaultConfig(host: string): Promise<any> {
+  const env = await TestEnvironment.getCurrent();
+
+  let props = {
+    user: "jane_doe",
+    host: host,
+    database: env.databaseInfo.default_db_name,
+    password: env.databaseInfo.password,
+    port: env.databaseInfo.clusterEndpointPort,
+    plugins: "iam",
+    ssl: sslCertificate
+  };
+  props = DriverHelper.addDriverSpecificConfiguration(props, env.engine);
+  return props;
+}
+
+async function validateConnection(client: AwsPGClient | AwsMySQLClient) {
+  try {
+    await client.connect();
+    const res = await DriverHelper.executeQuery(env.engine, client, "select 1");
+    expect(res).not.toBeNull();
+  } finally {
+    await client.end();
+  }
+}
+
+describe("iamTests", () => {
+  beforeAll(async () => {
+    env = await TestEnvironment.getCurrent();
+    driver = DriverHelper.getDriverForDatabaseEngine(env.engine);
+    initClientFunc = DriverHelper.getClient(driver);
+  });
+
+  beforeEach(async () => {
+    IamAuthenticationPlugin.clearCache();
+  });
+
+  it("testIamWrongDatabaseUsername", async () => {
+    const config = await initDefaultConfig(env.databaseInfo.clusterEndpoint);
+    config["user"] = `WRONG_${env.info.databaseInfo.username}_USER`;
+    const client: AwsPGClient | AwsMySQLClient = initClientFunc(config);
+
+    client.on("error", (error: any) => {
+      logger.error(error);
+    });
+
+    await expect(client.connect()).rejects.toThrow();
+  }, 100000);
+
+  it("testIamNoDatabaseUsername", async () => {
+    const config = await initDefaultConfig(env.databaseInfo.clusterEndpoint);
+    config["user"] = undefined;
+    const client: AwsPGClient | AwsMySQLClient = initClientFunc(config);
+
+    client.on("error", (error: any) => {
+      logger.error(error);
+    });
+
+    await expect(client.connect()).rejects.toBeInstanceOf(AwsWrapperError);
+  }, 100000);
+
+  it("testIamInvalidHost", async () => {
+    const config = await initDefaultConfig(env.databaseInfo.clusterEndpoint);
+    config["iamHost"] = "<>";
+    const client: AwsPGClient | AwsMySQLClient = initClientFunc(config);
+
+    client.on("error", (error: any) => {
+      logger.error(error);
+    });
+
+    await expect(client.connect()).rejects.toBeInstanceOf(AwsWrapperError);
+  }, 100000);
+
+  // Currently, PG cannot connect to an IP address with SSL enabled, skip if PG
+  it("testIamUsingIpAddress", async () => {
+    if (env.engine === "MYSQL") {
+      const instance = env.writer;
+      if (instance.host) {
+        const ip = await getIpAddress(instance.host);
+        const config = await initDefaultConfig(ip.address);
+
+        config["password"] = "anything";
+        config["iamHost"] = instance.host;
+
+        const client: AwsPGClient | AwsMySQLClient = initClientFunc(config);
+
+        client.on("error", (error: any) => {
+          logger.error(error);
+        });
+
+        await validateConnection(client);
+      } else {
+        throw new AwsWrapperError("Host not found");
+      }
+    }
+  }, 100000);
+
+  it("testIamValidConnectionProperties", async () => {
+    const config = await initDefaultConfig(env.databaseInfo.clusterEndpoint);
+    config["password"] = "anything";
+    const client: AwsPGClient | AwsMySQLClient = initClientFunc(config);
+
+    client.on("error", (error: any) => {
+      logger.error(error);
+    });
+
+    await validateConnection(client);
+  }, 100000);
+
+  it("testIamValidConnectionPropertiesNoPassword", async () => {
+    const config = await initDefaultConfig(env.databaseInfo.clusterEndpoint);
+    config["password"] = undefined;
+    const client: AwsPGClient | AwsMySQLClient = initClientFunc(config);
+
+    client.on("error", (error: any) => {
+      logger.error(error);
+    });
+
+    await validateConnection(client);
+  }, 100000);
+});
diff --git a/tests/integration/host/src/test/java/integration/host/util/ContainerHelper.java b/tests/integration/host/src/test/java/integration/host/util/ContainerHelper.java
index 24d6b76e..3519685f 100644
--- a/tests/integration/host/src/test/java/integration/host/util/ContainerHelper.java
+++ b/tests/integration/host/src/test/java/integration/host/util/ContainerHelper.java
@@ -164,6 +164,7 @@ public T withFixedExposedPort(int hostPort, int containerPort) {
         .withFileSystemBind("../../../pg", "/app/pg", BindMode.READ_ONLY)
         .withFileSystemBind("../../../mysql", "/app/mysql", BindMode.READ_ONLY)
         .withFileSystemBind("../../../common", "/app/common", BindMode.READ_ONLY)
+        .withFileSystemBind("../../../tests/integration/host/src/test/resources/global-bundle.pem", "/app/global-bundle.pem", BindMode.READ_ONLY)
         .withFileSystemBind("../../../jest.integration.config.json", "/app/jest.integration.config.json", BindMode.READ_ONLY)
         .withFileSystemBind("../../../tsconfig.json", "/app/tsconfig.json", BindMode.READ_ONLY)
         .withFileSystemBind("../../../package.json", "/app/package.json", BindMode.READ_ONLY)