From e5c8216faf26fea10eaaef3960433798d942040d Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Nuno=20G=C3=B3is?= <github@nunogois.com>
Date: Thu, 4 Sep 2025 16:01:34 +0100
Subject: [PATCH] chore: use password resolver in migrator

---
 src/migrator.ts | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/src/migrator.ts b/src/migrator.ts
index 8543cefb98..1a591eb119 100644
--- a/src/migrator.ts
+++ b/src/migrator.ts
@@ -6,6 +6,7 @@ import type { IUnleashConfig } from './lib/types/option.js';
 import { secondsToMilliseconds } from 'date-fns';
 import path from 'path';
 import { fileURLToPath } from 'node:url';
+import { getDBPasswordResolver } from './lib/db/aws-iam.js';
 
 log.setLogLevel('error');
 const __filename = fileURLToPath(import.meta.url);
@@ -25,6 +26,7 @@ export async function migrateDb(
     return noDatabaseUrl(async () => {
         const custom = {
             ...db,
+            password: getDBPasswordResolver(db),
             connectionTimeoutMillis: secondsToMilliseconds(10),
         };
 
@@ -46,6 +48,7 @@ export async function requiresMigration({
     return noDatabaseUrl(async () => {
         const custom = {
             ...db,
+            password: getDBPasswordResolver(db),
             connectionTimeoutMillis: secondsToMilliseconds(10),
         };
 
@@ -67,6 +70,7 @@ export async function resetDb({ db }: IUnleashConfig): Promise<void> {
     return noDatabaseUrl(async () => {
         const custom = {
             ...db,
+            password: getDBPasswordResolver(db),
             connectionTimeoutMillis: secondsToMilliseconds(10),
         };