AWS Database Blog

Grouping database tables in AWS DMS tasks for Oracle source engine

AWS Database Migration Service is a cloud service designed to simplify the process of migrating and replicating databases, data warehouses and other data stores. It offers a comprehensive solution for both homogeneous and heterogeneous database migrations, facilitating transitions between different database platforms. The migration process typically involves two major phases: Migration of existing data (full […]

Amazon DocumentDB Quick Start: Zero Setup with AWS CloudShell

Amazon DocumentDB (with MongoDB compatibility) launched its integration with AWS CloudShell. With this integration, you can now connect to Amazon DocumentDB with a single click on the AWS Management Console without needing to perform any setup. In this post, we show how to connect to and work with Amazon DocumentDB using CloudShell. Amazon DocumentDB is […]

Multiple database support on Amazon RDS for Db2 DB instance

Many organizations run IBM Db2 databases across multiple physical servers or virtual machines. This approach leads to resource investments in infrastructure, management, and licensing. Additionally, advancements in hardware technology, increased CPU capacities, and database engine enhancements result in underutilized servers if not rightsized at the outset. To optimize resource utilization, organizations can explore the following […]

Automate Amazon RDS credential rotation with AWS Secrets Manager for primary instances with read replicas

When using Secrets Manager to manage your master user passwords, you cannot create new read replicas for your database instance. This applies to all DB engines except Amazon RDS for SQL Server, potentially impacting your organization’s ability to efficiently scale its read operations while maintaining secure credential practices. In this post, we present a solution that automates the process of rotating passwords for a primary instance with read replicas while maintaining secure credential management practices. This approach allows you to take advantage of the benefits of both read scaling and automated credential rotation.

Customer-managed process for configuring Kerberos authentication on an Amazon RDS for SQL Server DB instance, joined to a self-managed Active Directory

Many organizations rely on Windows Authentication and Kerberos for secure access to their SQL Server databases. When using Amazon RDS for SQL Server with a self-managed Active Directory, organizations can enhance their authentication beyond the default NTLM protocol to support Kerberos authentication. In this post, we show you how to manually configure and maintain Kerberos authentication for Amazon RDS for SQL Server DB instances joined to a self-managed Active Directory. We walk through the process of configuring service principal names (SPNs), adding necessary user principal name (UPN) suffixes, and automating SPN updates to handle failovers and host replacements.