Enable Kerberos Authentication with Amazon RDS for Db2

Organizations operating hybrid environments can now extend their self-managed Active Directory authentication to Amazon RDS for Db2 instances via a forest trust with AWS Managed Microsoft AD. While basic Kerberos authentication functions transparently in this configuration, implementing group-based access control necessitates specific configuration, particularly when collaborating with users from trusted AD domains. In this post, we show how to enable Amazon RDS for Db2 to allow authorizations of groups in a customer managed Microsoft AD through a Directiry Service domain.