Amazon RDS for Db2 supports self-managed Active Directory
Amazon RDS for Db2 now allows direct integration with self-managed Active Directory domains for Kerberos authentication and single sign-on. This simplifies compliance and reduces complexity by eliminating the need for AWS Managed Microsoft AD or directory trusts. The feature is generally available across all RDS for Db2 regions and is free to use.
- →Direct integration with self-managed Active Directory
- →Simplified authentication and authorization
- →General availability and cost
Features (1) ›
- Direct integration with self-managed Active Directory
Amazon RDS for Db2 instances can now directly join self-managed Microsoft Active Directory domains, allowing Kerberos authentication for single sign-on. This integration works with on-premises, AWS, or other cloud-based AD environments.
Enhancements (1) ›
- Simplified authentication and authorization
Customers can now use their existing self-managed AD for authentication and authorization without deploying AWS Managed Microsoft AD or establishing directory trusts. This reduces complexity and helps meet compliance requirements using existing identity infrastructure.
Notes (1) ›
- General availability and cost
The self-managed Active Directory integration for Amazon RDS for Db2 is now generally available in all AWS Regions where RDS for Db2 is offered, including AWS GovCloud (US) Regions. The feature is available free of charge.
https://aws.amazon.com/about-aws/whats-new/2026/07/amazon-rds-db2-supports-self-managed-active-directory