PGFederatedAuthentication.py

#  Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
#
#  Licensed under the Apache License, Version 2.0 (the "License").
#  You may not use this file except in compliance with the License.
#  You may obtain a copy of the License at
#
#  http://www.apache.org/licenses/LICENSE-2.0
#
#  Unless required by applicable law or agreed to in writing, software
#  distributed under the License is distributed on an "AS IS" BASIS,
#  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
#  See the License for the specific language governing permissions and
#  limitations under the License.

import psycopg

from aws_advanced_python_wrapper import AwsWrapperConnection

if __name__ == "__main__":
    with AwsWrapperConnection.connect(
            psycopg.Connection.connect,
            host="database.cluster-xyz.us-east-2.rds.amazonaws.com",
            dbname="postgres",
            plugins="federated_auth",
            idp_name="adfs",
            idp_endpoint="ec2amaz-ab3cdef.example.com",
            iam_role_arn="arn:aws:iam::123456789012:role/adfs_example_iam_role",
            iam_idp_arn="arn:aws:iam::123456789012:saml-provider/adfs_example",
            iam_region="us-east-2",
            idp_username="some_federated_username@example.com",
            idp_password="some_password",
            db_user="john",
            autocommit=True
    ) as awsconn, awsconn.cursor() as awscursor:
        awscursor.execute("SELECT 1")

        res = awscursor.fetchone()
        print(res)