Kerberos authentication
By using Kerberos authentication in Amazon RDS, you can support external authentication of database users using Kerberos and Microsoft Active Directory. Using Kerberos and Active Directory provides the benefits of single sign-on and centralized authentication of database users.
Kerberos authentication isn't available with the following engines:
-
RDS for MariaDB
Although most Amazon Regions are active by default for your Amazon account, certain Regions
are activated only when you manually select them. These Regions are referred to as
opt-in Regions. In contrast, Regions that are active by default, as soon
as your Amazon account is created, are referred to as commercial
Regions, or simply, Regions. For opt-in Regions,
you must use a regionalized service principal of the form
directoryservice.rds.. For
example, for Africa (Cape Town), you must add service principal
region_name.amazonaws.comdirectoryservice.rds.region-af-south-1.amazonaws.com to your trust policy.
For more information, see
Kerberos authentication.
Topics
Kerberos authentication with RDS for Db2
The following Regions and engine versions are available for Kerberos authentication with RDS for Db2.
| Region | RDS for Db2 11.5 |
|---|---|
| US East (Ohio) | All versions |
| US East (N. Virginia) | All versions |
| US West (N. California) | All versions |
| US West (Oregon) | All versions |
| Africa (Cape Town) | – |
| Asia Pacific (Hong Kong) | – |
| Asia Pacific (Hyderabad) | – |
| Asia Pacific (Jakarta) | – |
| Asia Pacific (Melbourne) | – |
| Asia Pacific (Mumbai) | All versions |
| Asia Pacific (Osaka) | – |
| Asia Pacific (Seoul) | All versions |
| Asia Pacific (Singapore) | All versions |
| Asia Pacific (Sydney) | All versions |
| Asia Pacific (Tokyo) | All versions |
| Canada (Central) | All versions |
| Canada West (Calgary) | – |
| China (Beijing) | All versions |
| China (Ningxia) | All versions |
| Europe (Frankfurt) | All versions |
| Europe (Ireland) | All versions |
| Europe (London) | All versions |
| Europe (Milan) | – |
| Europe (Paris) | – |
| Europe (Spain) | – |
| Europe (Stockholm) | All versions |
| Europe (Zurich) | – |
| Israel (Tel Aviv) | – |
| Middle East (Bahrain) | – |
| Middle East (UAE) | – |
| South America (São Paulo) | All versions |
| Amazon GovCloud (US-East) | – |
| Amazon GovCloud (US-West) | – |
Kerberos authentication with RDS for MySQL
The following Regions and engine versions are available for Kerberos authentication with RDS for MySQL.
| Region | RDS for MySQL 8.0 | RDS for MySQL 5.7 | RDS for MySQL 5.6 |
|---|---|---|---|
| US East (Ohio) | All versions | All versions | All versions |
| US East (N. Virginia) | All versions | All versions | All versions |
| US West (N. California) | All versions | All versions | All versions |
| US West (Oregon) | All versions | All versions | All versions |
| Africa (Cape Town) | – | – | – |
| Asia Pacific (Hong Kong) | – | – | – |
| Asia Pacific (Hyderabad) | – | – | – |
| Asia Pacific (Jakarta) | – | – | – |
| Asia Pacific (Melbourne) | – | – | – |
| Asia Pacific (Mumbai) | All versions | All versions | All versions |
| Asia Pacific (Osaka) | – | – | – |
| Asia Pacific (Seoul) | All versions | All versions | All versions |
| Asia Pacific (Singapore) | All versions | All versions | All versions |
| Asia Pacific (Sydney) | All versions | All versions | All versions |
| Asia Pacific (Tokyo) | All versions | All versions | All versions |
| Canada (Central) | All versions | All versions | All versions |
| Canada West (Calgary) | – | – | – |
| China (Beijing) | All versions | All versions | All versions |
| China (Ningxia) | All versions | All versions | All versions |
| Europe (Frankfurt) | All versions | All versions | All versions |
| Europe (Ireland) | All versions | All versions | All versions |
| Europe (London) | All versions | All versions | All versions |
| Europe (Milan) | – | – | – |
| Europe (Paris) | – | – | – |
| Europe (Spain) | – | – | – |
| Europe (Stockholm) | All versions | All versions | All versions |
| Europe (Zurich) | – | – | – |
| Israel (Tel Aviv) | – | – | – |
| Middle East (Bahrain) | – | – | – |
| Middle East (UAE) | – | – | – |
| South America (São Paulo) | All versions | All versions | All versions |
| Amazon GovCloud (US-East) | – | – | – |
| Amazon GovCloud (US-West) | – | – | – |
Kerberos authentication with RDS for Oracle
The following Regions and engine versions are available for Kerberos authentication with RDS for Oracle.
| Region | RDS for Oracle 21c | RDS for Oracle 19c |
|---|---|---|
| US East (Ohio) | All versions | All versions |
| US East (N. Virginia) | All versions | All versions |
| US West (N. California) | All versions | All versions |
| US West (Oregon) | All versions | All versions |
| Africa (Cape Town) (opt-in Region) | All versions | All versions |
| Asia Pacific (Hong Kong) (opt-in Region) | All versions | All versions |
| Asia Pacific (Hyderabad) (opt-in Region) | All versions | All versions |
| Asia Pacific (Jakarta) (opt-in Region) | All versions | All versions |
| Asia Pacific (Melbourne) (opt-in Region) | All versions | All versions |
| Asia Pacific (Mumbai) | All versions | All versions |
| Asia Pacific (Osaka) | – | – |
| Asia Pacific (Seoul) | All versions | All versions |
| Asia Pacific (Singapore) | All versions | All versions |
| Asia Pacific (Sydney) | All versions | All versions |
| Asia Pacific (Tokyo) | All versions | All versions |
| Canada (Central) | All versions | All versions |
| Canada West (Calgary) | – | – |
| China (Beijing) | – | – |
| China (Ningxia) | – | – |
| Europe (Frankfurt) | All versions | All versions |
| Europe (Ireland) | All versions | All versions |
| Europe (London) | All versions | All versions |
| Europe (Milan) (opt-in Region) | All versions | All versions |
| Europe (Paris) | – | – |
| Europe (Spain) (opt-in Region) | All versions | All versions |
| Europe (Stockholm) | All versions | All versions |
| Europe (Zurich) (opt-in Region) | All versions | All versions |
| Israel (Tel Aviv) (opt-in Region) | All versions | All versions |
| Middle East (Bahrain) (opt-in Region) | All versions | All versions |
| Middle East (UAE) (opt-in Region) | All versions | All versions |
| South America (São Paulo) | All versions | All versions |
| Amazon GovCloud (US-East) | All versions | All versions |
| Amazon GovCloud (US-West) | All versions | All versions |
Kerberos authentication with RDS for PostgreSQL
The following Regions and engine versions are available for Kerberos authentication with RDS for PostgreSQL.
| Region | RDS for PostgreSQL 16 | RDS for PostgreSQL 15 | RDS for PostgreSQL 14 | RDS for PostgreSQL 13 | RDS for PostgreSQL 12 | RDS for PostgreSQL 11 | RDS for PostgreSQL 10 |
|---|---|---|---|---|---|---|---|
| US East (Ohio) | All versions | All versions | All versions | All versions | All versions | All versions | All versions |
| US East (N. Virginia) | All versions | All versions | All versions | All versions | All versions | All versions | All versions |
| US West (N. California) | All versions | All versions | All versions | All versions | All versions | All versions | All versions |
| US West (Oregon) | All versions | All versions | All versions | All versions | All versions | All versions | All versions |
| Africa (Cape Town) | – | – | – | – | – | – | – |
| Asia Pacific (Hong Kong) | – | – | – | – | – | – | – |
| Asia Pacific (Hyderabad) | – | – | – | – | – | – | – |
| Asia Pacific (Jakarta) | – | – | – | – | – | – | – |
| Asia Pacific (Melbourne) | – | – | – | – | – | – | – |
| Asia Pacific (Mumbai) | All versions | All versions | All versions | All versions | All versions | All versions | All versions |
| Asia Pacific (Osaka) | – | – | – | – | – | – | – |
| Asia Pacific (Seoul) | All versions | All versions | All versions | All versions | All versions | All versions | All versions |
| Asia Pacific (Singapore) | All versions | All versions | All versions | All versions | All versions | All versions | All versions |
| Asia Pacific (Sydney) | All versions | All versions | All versions | All versions | All versions | All versions | All versions |
| Asia Pacific (Tokyo) | All versions | All versions | All versions | All versions | All versions | All versions | All versions |
| Canada (Central) | All versions | All versions | All versions | All versions | All versions | All versions | All versions |
| Canada West (Calgary) | – | – | – | – | – | – | – |
| China (Beijing) | All versions | All versions | All versions | All versions | All versions | All versions | All versions |
| China (Ningxia) | All versions | All versions | All versions | All versions | All versions | All versions | All versions |
| Europe (Frankfurt) | All versions | All versions | All versions | All versions | All versions | All versions | All versions |
| Europe (Ireland) | All versions | All versions | All versions | All versions | All versions | All versions | All versions |
| Europe (London) | All versions | All versions | All versions | All versions | All versions | All versions | All versions |
| Europe (Milan) | – | – | – | – | – | – | – |
| Europe (Paris) | All versions | All versions | All versions | All versions | All versions | All versions | All versions |
| Europe (Spain) | – | – | – | – | – | – | – |
| Europe (Stockholm) | All versions | All versions | All versions | All versions | All versions | All versions | All versions |
| Europe (Zurich) | – | – | – | – | – | – | – |
| Israel (Tel Aviv) | – | – | – | – | – | – | – |
| Middle East (Bahrain) | – | – | – | – | – | – | – |
| Middle East (UAE) | – | – | – | – | – | – | – |
| South America (São Paulo) | All versions | All versions | All versions | All versions | All versions | All versions | All versions |
| Amazon GovCloud (US-East) | – | – | – | – | – | – | – |
| Amazon GovCloud (US-West) | – | – | – | – | – | – | – |
Kerberos authentication with RDS for SQL Server
The following Regions and engine versions are available for Kerberos authentication with RDS for SQL Server.
| Region | RDS for SQL Server 2019 | RDS for SQL Server 2017 | RDS for SQL Server 2016 | RDS for SQL Server 2014 |
|---|---|---|---|---|
| US East (Ohio) | All versions | All versions | All versions | All versions |
| US East (N. Virginia) | All versions | All versions | All versions | All versions |
| US West (N. California) | All versions | All versions | All versions | All versions |
| US West (Oregon) | All versions | All versions | All versions | All versions |
| Africa (Cape Town) | All versions | All versions | All versions | All versions |
| Asia Pacific (Hong Kong) | All versions | All versions | All versions | All versions |
| Asia Pacific (Hyderabad) | All versions | All versions | All versions | All versions |
| Asia Pacific (Jakarta) | All versions | All versions | All versions | All versions |
| Asia Pacific (Melbourne) | All versions | All versions | All versions | All versions |
| Asia Pacific (Mumbai) | All versions | All versions | All versions | All versions |
| Asia Pacific (Osaka) | All versions | All versions | All versions | All versions |
| Asia Pacific (Seoul) | All versions | All versions | All versions | All versions |
| Asia Pacific (Singapore) | All versions | All versions | All versions | All versions |
| Asia Pacific (Sydney) | All versions | All versions | All versions | All versions |
| Asia Pacific (Tokyo) | All versions | All versions | All versions | All versions |
| Canada (Central) | All versions | All versions | All versions | All versions |
| Canada West (Calgary) | – | – | – | – |
| China (Beijing) | All versions | All versions | All versions | All versions |
| China (Ningxia) | All versions | All versions | All versions | All versions |
| Europe (Frankfurt) | All versions | All versions | All versions | All versions |
| Europe (Ireland) | All versions | All versions | All versions | All versions |
| Europe (London) | All versions | All versions | All versions | All versions |
| Europe (Milan) | All versions | All versions | All versions | All versions |
| Europe (Paris) | All versions | All versions | All versions | All versions |
| Europe (Spain) | All versions | All versions | All versions | All versions |
| Europe (Stockholm) | All versions | All versions | All versions | All versions |
| Europe (Zurich) | All versions | All versions | All versions | All versions |
| Israel (Tel Aviv) | – | – | – | – |
| Middle East (Bahrain) | All versions | All versions | All versions | All versions |
| Middle East (UAE) | All versions | All versions | All versions | All versions |
| South America (São Paulo) | All versions | All versions | All versions | All versions |
| Amazon GovCloud (US-East) | All versions | All versions | All versions | All versions |
| Amazon GovCloud (US-West) | All versions | All versions | All versions | All versions |