The ability to set default_authentication_plugin directly in a parameter group was added in Aurora MySQL v3. https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/AuroraMySQL.Reference.ParameterGroups.html
default_authentication_plugin