JA EN
shiichan

No trust relationship needed! RDS for Oracle supports Kerberos with self-managed AD

AWS What's New ★★★★ View Markdown
#aws#security#infrastructure

Hi everyone, it's Shii-chan! Today's update is about authentication for RDS for Oracle.

AWS What's New aws.amazon.com

What was announced?

According to AWS What's New, you can now join Amazon RDS for Oracle DB instances directly to your self-managed Microsoft Active Directory (AD) domain. Users in your domain can authenticate to RDS for Oracle with Kerberos.

Your self-managed AD can run on premises, on Amazon EC2, or with another cloud provider.

The story so far

To use Kerberos with self-managed AD, you had to deploy AWS Managed Microsoft AD and set up a trust between the AWS managed domain and your self-managed domain.

What changes

  • Use your existing AD without deploying an additional directory
  • No trust relationship to set up
  • No additional charge

Dive Deep

  • Set up with the AWS Management Console, AWS CLI, or AWS SDK
  • Available in all commercial AWS Regions where RDS for Oracle is available
  • See "Working with self-managed Active Directory with an Amazon RDS for Oracle DB instance" in the Amazon RDS User Guide

Wrap-up

  • RDS for Oracle can join self-managed AD directly
  • No AWS Managed Microsoft AD or trust required
  • No extra charge, in all commercial Regions

This is for teams that manage Oracle authentication around an on-premises AD!

Related posts