title: Using Terraform to create RDS (Amazon Aurora PostgreSQL) with features (IAM auth, rotating master pw)
body: <p>I have been given a task at work to create an RDS cluster module using Terraform that will allow for consumers to spin up their own clusters/dbs etc. This is all fairly straight forward but it is the second lot of requirements that has me pulling my hair out. The DBAs want to know how to do the following:</p>
  <ol>
  <li>Store and rotate the master password in secrets manager.</li>
  <li>Create additional dbs, users etc via automation (nothing is to be clickops'd).</li>
  <li>Utilise IAM authentication so that users do not have to be created/auth'd.</li>
  </ol>
  <p>I have looked at a number of different ways of doing this and as i'm fairly new to this, nothing seems to stick out as &quot;the best solution&quot;. Would anyone be able to give me a rundown of how they may have approached a similar task? Did you store and rotate password using a lambda function or did you assign the master user to an IAM role? Are you using the TF postgres provider to create roles or did you write your own code to automate?</p>
  <p>I really appreciate any guidance.
  Thanks heaps</p>