AWS Database Blog

Category: AWS Directory Service

Customer-managed process for configuring Kerberos authentication on an HAQM RDS for SQL Server DB instance, joined to a self-managed Active Directory

Many organizations rely on Windows Authentication and Kerberos for secure access to their SQL Server databases. When using HAQM RDS for SQL Server with a self-managed Active Directory, organizations can enhance their authentication beyond the default NTLM protocol to support Kerberos authentication. In this post, we show you how to manually configure and maintain Kerberos authentication for HAQM RDS for SQL Server DB instances joined to a self-managed Active Directory. We walk through the process of configuring service principal names (SPNs), adding necessary user principal name (UPN) suffixes, and automating SPN updates to handle failovers and host replacements.

Join your HAQM RDS for Db2 instances across accounts to a single shared domain

With HAQM RDS for Db2, you can seamlessly authenticate your users and groups with or without Kerberos authentication using a single AWS Microsoft AD directory that can serve multiple accounts. In this post, we use AWS Managed Microsoft AD from an AWS account to provide Microsoft AD authentication to HAQM RDS for Db2 in a different account.

Use Kerberos authentication with HAQM Aurora MySQL

HAQM Aurora MySQL-Compatible Edition offers multiple authentication methods to securely authenticate database user access and meet different security needs. The most common method of authentication is using a user name and password. This can create additional overhead for both users and database administrators to manage and rotate these credentials; it also requires additional investments in […]

Joining your HAQM RDS DB instances across accounts to a single shared domain

How can you simplify the setup and maintenance and reduce the costs of AWS Managed Microsoft AD directories, while also strengthen the security of your HAQM Relational Database Service (RDS) for SQL Server DB instances? AWS announced that you can now join your HAQM RDS for SQL Server DB instances deployed across multiple AWS accounts […]