Author: Vikram Khatri

Organizations operating hybrid environments can now extend their self-managed Active Directory authentication to Amazon RDS for Db2 instances via a forest trust with AWS Managed Microsoft AD. While basic Kerberos authentication functions transparently in this configuration, implementing group-based access control necessitates specific configuration, particularly when collaborating with users from trusted AD domains. In this post, we show how to enable Amazon RDS for Db2 to allow authorizations of groups in a customer managed Microsoft AD through a Directory Service domain.

Connecting to an Amazon RDS for Db2 instance has traditionally required spinning up an Amazon EC2 bastion host or running Db2 clients locally. With the new AWS CloudShell VPC integrated environments, you can now securely connect—with no Amazon EC2 required, no local installs, and no cost beyond normal Amazon RDS and AWS networking. In this post, we show you how to connect to Amazon RDS for Db2 using CloudShell.

You can create an Amazon RDS for Db2 instance by using the AWS Management Console, AWS Command Line Interface (AWS CLI), AWS CloudFormation, Terraform by Hashicorp, AWS Lambda functions, or other methods. One of the prerequisites for creating an RDS for Db2 instance is to configure the virtual private cloud (VPC) appropriately. This post shows how to create a VPC with best practices for any Amazon RDS database in general and Amazon RDS for Db2 in particular through a one-click automated deployment.

With Amazon RDS for Db2, you can seamlessly authenticate your users and groups with or without Kerberos authentication using a single AWS Microsoft AD directory that can serve multiple accounts. In this post, we use AWS Managed Microsoft AD from an AWS account to provide Microsoft AD authentication to Amazon RDS for Db2 in a different account.

Amazon announced Amazon Relational Database (Amazon RDS) for Db2 at re:Invent 2023. RDS for Db2 is the latest addition to the Amazon RDS family of database engines. You can deploy a Db2 database on scalable hardware in minutes designed for optimal performance with an optional highly available database using a Multi-AZ deployment, which synchronously replicates […]