How to use aws-rds datasource using Mend.io?

[JulesClaussen]

How are you running Renovate?

A Mend.io-hosted app

If you're self-hosting Renovate, tell us which platform (GitHub, GitLab, etc) and which version of Renovate.

No response

Please tell us more about your question or problem

Hey everyone,

Quick one, we achieved to configure renovate to use aws-rds, and it works fine locally when having AWS Credentials.
However, we cannot use this datasource due to permissions missing on AWS for this provider.

This is the config we use:

{
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  "customManagers": [
    {
      "customType": "regex",
      "fileMatch": ["\\.hcl$"],
      "matchStrings": [
        "[ ]*# renovate: engine=(?<engine>.*?)\n.*[ ]*=[ ]*\"(?<currentValue>.*)\".*"
      ],
      "datasourceTemplate": "aws-rds",
      "depNameTemplate": "[{\"Name\":\"engine\",\"Values\":[\"{{{engine}}}\"]}]"
    }
  ]
}

And the error we are in the logs below.

Am I missing something from the conf?

Thank you!
Jules

Logs (if relevant)

Logs

DEBUG: Datasource unknown error
{
  "datasource": "aws-rds"
  "packageName": "[{\"Name\":\"engine\",\"Values\":[\"aurora-postgresql\"]}]"
  "err": {
    "name": "AccessDenied",
    "$fault": "client",
    "$metadata": {
      "httpStatusCode": 403,
      "requestId": "9ad8f604-8eda-45a2-a625-74ffbe1e7e45",
      "attempts": 1,
      "totalRetryDelay": 0
    },
    "Type": "Sender",
    "Code": "AccessDenied",
    "message": "User: arn:aws:sts::472613559203:assumed-role/codedeploy-ec2/i-0f024218def19cb67 is not authorized to perform: rds:DescribeDBEngineVersions because no identity-based policy allows the rds:DescribeDBEngineVersions action",
    "stack": "AccessDenied: User: arn:aws:sts::472613559203:assumed-role/codedeploy-ec2/i-0f024218def19cb67 is not authorized to perform: rds:DescribeDBEngineVersions because no identity-based policy allows the rds:DescribeDBEngineVersions action\n    at throwDefaultError (/usr/local/renovate/node_modules/.pnpm/@smithy+smithy-client@3.4.2/node_modules/@smithy/smithy-client/dist-cjs/index.js:836:20)\n    at /usr/local/renovate/node_modules/.pnpm/@smithy+smithy-client@3.4.2/node_modules/@smithy/smithy-client/dist-cjs/index.js:845:5\n    at de_CommandError (/usr/local/renovate/node_modules/.pnpm/@aws-sdk+client-rds@3.658.1/node_modules/@aws-sdk/client-rds/dist-cjs/index.js:7392:14)\n    at processTicksAndRejections (node:internal/process/task_queues:95:5)\n    at /usr/local/renovate/node_modules/.pnpm/@smithy+middleware-serde@3.0.8/node_modules/@smithy/middleware-serde/dist-cjs/index.js:35:20\n    at /usr/local/renovate/node_modules/.pnpm/@smithy+core@2.5.1/node_modules/@smithy/core/dist-cjs/index.js:168:18\n    at /usr/local/renovate/node_modules/.pnpm/@smithy+middleware-retry@3.0.25/node_modules/@smithy/middleware-retry/dist-cjs/index.js:320:38\n    at /usr/local/renovate/node_modules/.pnpm/@aws-sdk+middleware-logger@3.654.0/node_modules/@aws-sdk/middleware-logger/dist-cjs/index.js:34:22\n    at AwsRdsDatasource.getReleases (/usr/local/renovate/lib/modules/datasource/aws-rds/index.ts:32:22)\n    at /usr/local/renovate/lib/util/cache/package/decorator.ts:134:20\n    at fetchReleases (/usr/local/renovate/lib/modules/datasource/index.ts:325:13)"
  }
}

DEBUG: Failed to look up aws-rds package [{"Name":"engine","Values":["aurora-postgresql"]}]