Connections and IAM tokens

Aurora DSQL caps a connection at one hour, and authenticates it with a token that expires sooner than that. Those two facts interact badly with the way most pools are written.

The token is not a password #

const pool = new Pool({
  password: getAuthToken,   // a function, not a string
});

Passing a string mints one token at startup. It works for fifteen minutes and then every new connection fails.