# Does pt-online-schema-change tool support IAM based user authentications?

**URL:** <https://forums.percona.com/t/does-pt-online-schema-change-tool-support-iam-based-user-authentications/8244>\
**Category:** Other Tools\
**Created:** [November 6, 2020, 1:38pm UTC](https://forums.percona.com/t/does-pt-online-schema-change-tool-support-iam-based-user-authentications/8244 "2020-11-06T13:38:46Z")\
**Posts on this page:** 1\
**Showing post:** 3

<div class="post-metadata">

**Author:** ![dinesh082293](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/dinesh082293/32/10176_2.png) [@dinesh082293](https://forums.percona.com/u/dinesh082293)\
**Post date:** [November 17, 2020, 1:46am UTC](https://forums.percona.com/t/does-pt-online-schema-change-tool-support-iam-based-user-authentications/8244/3 "2020-11-17T01:46:19Z")

</div>

@matthewb When i generate IAM token and use that password with below command, it fails with access denied error.

Command used:

pt-online-schema-change D=XXXX,t=XXXX,u=XXXX,[h=XXXX.rds.amazonaws.com](http://h=XXXX.rds.amazonaws.com) --ask-pass --critical-load Threads\_running=1500 --alter-foreign-keys-method auto --recursion-method none --progress percentage,1 --no-check-alter --nodrop-old-table --execute --alter "ADD INDEX “XXXXX;”

Used the same token to login into the RDS via MySQL client through IAM authentication and it was successful. And i was able to use pt-online-schema-change as normal user. Issue[access denied] only comes when i use pt-online-schema-change with IAM token.

---

_[View the full topic](https://forums.percona.com/t/does-pt-online-schema-change-tool-support-iam-based-user-authentications/8244)._