There are several key restrictions on IAM token auth, not to mention that it may not be feasible to integrate in a given framework. It definitely solves the pro

There are several key restrictions on IAM token auth, not to mention that it may not be feasible to integrate in a given framework. It definitely solves the problem for manual access, but automated access may be a different story. That said, there are a handful of examples available to handle RDS secret rotation through parameter store with Lambdas and custom cloudformation resources.