View a markdown version of this page

Integrating Amazon Aurora PostgreSQL with other Amazon services - Amazon Aurora
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

Integrating Amazon Aurora PostgreSQL with other Amazon services

Amazon Aurora integrates with other Amazon services so that you can extend your Aurora PostgreSQL DB cluster to use additional capabilities in the Amazon Cloud. Your Aurora PostgreSQL DB cluster can use Amazon services to do the following:

DNS resolution conflicts with Kerberos authentication and Amazon service VPC endpoints

Connections from your DB cluster to Amazon services may fail if you enable Kerberos authentication and configure VPC endpoints for those services in your Amazon Managed Microsoft AD VPC.

When you enable Kerberos authentication, your DB cluster prioritizes Amazon Managed Microsoft AD DNS servers over the VPC DNS resolver. If endpoint records for Amazon services (such as Lambda, Amazon S3, or SageMaker AI) exist in your Amazon Managed Microsoft AD DNS, the endpoints may resolve to IP addresses in your Active Directory VPC rather than your database VPC. This configuration prevents successful connections from your DB cluster to those services.

For more information, see Using Kerberos authentication with Aurora PostgreSQL.