datahub/metadata-ingestion/docs/sources/mysql/mysql_pre.md

### Prerequisites

In order to execute this source the user credentials needs the following privileges

- `grant select on DATABASE.* to 'USERNAME'@'%'`
- `grant show view on DATABASE.* to 'USERNAME'@'%'`

`select` is required to see the table structure as well as for profiling.

### AWS RDS IAM Authentication

For AWS RDS MySQL instances, you can use IAM authentication instead of traditional username/password authentication.

**Setup:**

Follow the [AWS RDS IAM Database Authentication](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/UsingWithRDS.IAMDBAuth.html) documentation to:

- Enable IAM database authentication on your RDS instance
- Create database users that use IAM authentication
- Configure IAM policies with `rds-db:connect` permissions

**Configuration:**

Set `auth_mode: "AWS_IAM"` in your recipe and optionally configure `aws_config` for AWS credentials and region (see example below). If `aws_config` is not specified, boto3 will automatically use the default credential chain from environment variables, AWS config files, or IAM role metadata.
doc(ingest): mysql - describe required grants (#4958) 2022-05-21 04:22:44 +05:30			`### Prerequisites`

			`In order to execute this source the user credentials needs the following privileges`
ci(graphql,workflows): Format .md, .graphql, and workflow .yml files via prettier (#13220) 2025-04-16 16:55:51 -07:00
doc(ingest): mysql - describe required grants (#4958) 2022-05-21 04:22:44 +05:30			- `grant select on DATABASE.* to 'USERNAME'@'%'`
			- `grant show view on DATABASE.* to 'USERNAME'@'%'`

ci(graphql,workflows): Format .md, .graphql, and workflow .yml files via prettier (#13220) 2025-04-16 16:55:51 -07:00			`select` is required to see the table structure as well as for profiling.
feat(ingest/postgres,mysql): Add iam auth support for MySql and Postgresql source (#14899) 2025-10-21 08:33:39 +02:00
			`### AWS RDS IAM Authentication`

			`For AWS RDS MySQL instances, you can use IAM authentication instead of traditional username/password authentication.`

			`Setup:`

			`Follow the [AWS RDS IAM Database Authentication](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/UsingWithRDS.IAMDBAuth.html) documentation to:`

			`- Enable IAM database authentication on your RDS instance`
			`- Create database users that use IAM authentication`
			- Configure IAM policies with `rds-db:connect` permissions

			`Configuration:`

			Set `auth_mode: "AWS_IAM"` in your recipe and optionally configure `aws_config` for AWS credentials and region (see example below). If `aws_config` is not specified, boto3 will automatically use the default credential chain from environment variables, AWS config files, or IAM role metadata.