Skip to content

AWS Credentials

DBeaver is integrated with AWS IAM authentication. Thus it provides the possibility to authenticate in AWS in order to access your cloud databases.

AWS IAM has endless ways to authorize and authenticate users. DBeaver supports all basic ones.

Default credentials

When you use Default Credentials, AWS will then try to determine credentials by using the standard credential providers chain:

  • Java system properties
  • Environment variables
  • Web identity token from AWS STS
  • The shared credentials and config files
  • Amazon ECS container credentials
  • Amazon EC2 instance profile credentials
  • Amazon SSO credentials

Using default credentials is essentially the simplest way to integrate with various SSO providers and web identity providers as they usually provide credentials through config files.

Please read the AWS credentials documentation for a detailed explanation.

Access keys

It is the most simple way to authenticate. You only need to enter the IAM user access key and secret key. You can save them locally or (more securely) enter them every time you connect to a database.

Official AWS instructions: Managing access keys for IAM users

AWS Profiles

Similar to default credentials but you can also choose which credentials profile you want to use. The official AWS instructions can be found at crednetials config files.

Single Sign On

If your AWS account has configured SSO portal then you can use a web-based SSO authorization. SSO support can be enabled for Default and Profile-based AWS authoriation types. You need to turn on the "Enable SSO" option.