Amazon RDS for Oracle Now Supports Kerberos Authentication with Self-Managed Active Directory

At a glance

Amazon RDS for Oracle databases can now connect directly to a Microsoft Active Directory (AD, a Windows directory service that manages user accounts in one place) domain that a company runs itself. AD users can now access Oracle databases using Kerberos (an authentication method that verifies identity across a network).

Key points

1. 1

   Previously, you had to create a separate AWS Managed Microsoft AD and set up a trust relationship between the two domains.

2. 2

   Now you can connect directly to an existing AD and handle user authentication and authorization without an extra directory or trust relationship.

3. 3

   The AD can be located on-premises, in Amazon EC2, or in another cloud.

4. 4

   Setup can be done through the AWS Management Console, AWS CLI, or AWS SDK, and there is no extra charge for using a self-managed AD.

Why it matters

Companies can keep their existing account systems and make access management for Oracle databases much simpler.