How to connect to AWS generate_db_auth_token?

[bartolsthoorn]

I would like to connect to a MySQL db at AWS where the password is generated by generate_db_auth_token: https://docs.aws.amazon.com/cli/latest/reference/rds/generate-db-auth-token.html.

In Python, this looks something like this:

import boto3
import subprocess
auth_token = client.generate_db_auth_token(db_host, db_port, db_user)
connection_string = f"mysql://{db_user}:{auth_token}@tcp({db_host})/databasename?tls=true&allowCleartextPasswords=true"
cmd = f"./dbmate -u {connection_string} up"
subprocess.check_output(cmd.split(' '), text=True)

However, the auth_token password is a long string, for example (from the docs).:

mydb.123456789012.us-east-1.rds.amazonaws.com:3306/?Action=connect&DBUser=db_user&X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAIEXAMPLE%2Fus-east-1%2Frds-db%2Faws4_request&X-Amz-Date=20210123T011543Z&X-Amz-Expires=900&X-Amz-SignedHeaders=host&X-Amz-Signature=88987EXAMPLE1EXAMPLE2EXAMPLE3EXAMPLE4EXAMPLE5EXAMPLE6

This does not make for a working connection string that parses by dbmate. Has anyone managed to connect dbmate to mysql RDS through this IAM authentication?