Day 4

aws secretsmanager create-secret \
  --name prod/rds/myapp \
  --secret-string '{
    "host": "myapp-postgres.xyz.us-east-1.rds.amazonaws.com",
    "port": 5432,
    "dbname": "myapp",
    "username": "appuser",
    "password": "your-generated-password"
  }'

import pg from 'pg';
import { SecretsManagerClient, GetSecretValueCommand } from '@aws-sdk/client-secrets-manager';

const sm = new SecretsManagerClient({ region: 'us-east-1' });

async function getDbConfig() {
  const res = await sm.send(new GetSecretValueCommand({
    SecretId: 'prod/rds/myapp'
  }));
  return JSON.parse(res.SecretString);
}

let pool;
export async function getPool() {
  if (!pool) {
    const config = await getDbConfig();
    pool = new pg.Pool({
      host: config.host,
      port: config.port,
      database: config.dbname,
      user: config.username,
      password: config.password,
      ssl: { rejectUnauthorized: false }, // RDS requires SSL
      max: 10,
      idleTimeoutMillis: 30000,
    });
  }
  return pool;
}

// Usage
const pool = await getPool();
const result = await pool.query('SELECT NOW()');
console.log(result.rows[0]);

npm install node-pg-migrate

# package.json scripts
"migrate:up": "node-pg-migrate up",
"migrate:down": "node-pg-migrate down",
"migrate:create": "node-pg-migrate create"

# Run migrations against RDS (use the credentials from Secrets Manager)
DATABASE_URL="postgresql://appuser:pass@host:5432/myapp" npm run migrate:up