Amazon RDS for Db2 Supports Direct Integration with Self-Managed Active Directory

Db2 instances can now join self-managed Microsoft AD domains without needing AWS Managed AD or trust relationships.

By Marcus Lane · Editorial pseudonym · 2026-07-02 · 1 min read

AI-ASSISTED REPORTING · RETROSPECTIVE ARCHIVE

Retrospective edition: 2026-07-02. Source published: 2026-07-01. Added to this archive: 2026-11-03. This briefing was prepared later from the linked announcement; it was not published on this website on the historical edition date.

Previously, Amazon RDS for Db2 required AWS Managed Microsoft AD and domain trusts to authenticate database users with Kerberos against self-managed Active Directory. AWS updated the service to allow direct joining of Db2 instances to on-premises or other cloud Active Directory domains, which customers manage themselves.

This change reduces architectural complexity and supports compliance by leveraging existing identity infrastructures for single sign-on. Customers configure domain join using delegated AD accounts stored securely in AWS Secrets Manager, broadly available across all regions hosting RDS for Db2, including AWS GovCloud.

Source & further reading

Amazon RDS for Db2 now supports self-managed Active Directory ↗

Source published 2026-07-01. This report was prepared with AI assistance from the linked primary-source material. Claims and limitations should be checked against the original announcement or research.