# No trust relationship needed! RDS for Oracle supports Kerberos with self-managed AD

Hi everyone, it's Shii-chan! Today's update is about authentication for RDS for Oracle.

## What was announced?

According to AWS What's New, you can now **join Amazon RDS for Oracle DB instances directly to your self-managed Microsoft Active Directory (AD) domain**. Users in your domain can authenticate to RDS for Oracle with Kerberos.

Your self-managed AD can run on premises, on Amazon EC2, or with another cloud provider.

## The story so far

To use Kerberos with self-managed AD, you had to deploy AWS Managed Microsoft AD and set up a trust between the AWS managed domain and your self-managed domain.

## What changes

- Use your existing AD without deploying an additional directory
- No trust relationship to set up
- No additional charge

## Dive Deep

- Set up with the AWS Management Console, AWS CLI, or AWS SDK
- Available in all commercial AWS Regions where RDS for Oracle is available
- See "Working with self-managed Active Directory with an Amazon RDS for Oracle DB instance" in the Amazon RDS User Guide

## Wrap-up

- RDS for Oracle can join self-managed AD directly
- No AWS Managed Microsoft AD or trust required
- No extra charge, in all commercial Regions

This is for teams that manage Oracle authentication around an on-premises AD!