Supported Regions and DB engines for Kerberos authentication in Amazon RDS
By using Kerberos authentication in Amazon RDS, you can support external authentication of database users using Kerberos and Microsoft Active Directory. Using Kerberos and Active Directory provides the benefits of single sign-on and centralized authentication of database users.
Kerberos authentication isn't available with the following engines:
-
RDS for MariaDB
Although most AWS Regions are active by default for your AWS account, certain Regions
are activated only when you manually select them. These Regions are referred to as
opt-in Regions. In contrast, Regions that are active by default, as soon
as your AWS account is created, are referred to as commercial
Regions, or simply, Regions. For opt-in Regions,
you must use a regionalized service principal of the form
directoryservice.rds.. For
example, for Africa (Cape Town), you must add service principal
region_name.amazonaws.comdirectoryservice.rds.region-af-south-1.amazonaws.com to your trust policy. For
more information, see Kerberos authentication.
Topics
Kerberos authentication with RDS for Db2
The following Regions and engine versions are available for Kerberos authentication with RDS for Db2.
| Region | RDS for Db2 11.5 |
|---|---|
| US East (N. Virginia) | All versions |
| US East (Ohio) | All versions |
| US West (N. California) | All versions |
| US West (Oregon) | All versions |
| Africa (Cape Town) | Not available |
| Asia Pacific (Hong Kong) | Not available |
| Asia Pacific (Hyderabad) | Not available |
| Asia Pacific (Jakarta) | Not available |
| Asia Pacific (Malaysia) | Not available |
| Asia Pacific (Melbourne) | Not available |
| Asia Pacific (Mumbai) | All versions |
| Asia Pacific (Osaka) | Not available |
| Asia Pacific (Seoul) | All versions |
| Asia Pacific (Singapore) | All versions |
| Asia Pacific (Sydney) | All versions |
| Asia Pacific (Tokyo) | All versions |
| Canada (Central) | All versions |
| Canada West (Calgary) | Not available |
| China (Beijing) | All versions |
| China (Ningxia) | All versions |
| Europe (Frankfurt) | All versions |
| Europe (Ireland) | All versions |
| Europe (London) | All versions |
| Europe (Milan) | Not available |
| Europe (Paris) | Not available |
| Europe (Spain) | Not available |
| Europe (Stockholm) | All versions |
| Europe (Zurich) | Not available |
| Israel (Tel Aviv) | Not available |
| Middle East (Bahrain) | Not available |
| Middle East (UAE) | Not available |
| South America (São Paulo) | All versions |
| AWS GovCloud (US-East) | Not available |
| AWS GovCloud (US-West) | Not available |
Kerberos authentication with RDS for MySQL
The following Regions and engine versions are available for Kerberos authentication with RDS for MySQL.
| Region | RDS for MySQL 8.0 | RDS for MySQL 5.7 | RDS for MySQL 5.6 |
|---|---|---|---|
| US East (N. Virginia) | All versions | All versions | All versions |
| US East (Ohio) | All versions | All versions | All versions |
| US West (N. California) | All versions | All versions | All versions |
| US West (Oregon) | All versions | All versions | All versions |
| Africa (Cape Town) | All versions | All versions | All versions |
| Asia Pacific (Hong Kong) | All versions | All versions | All versions |
| Asia Pacific (Hyderabad) | All versions | All versions | All versions |
| Asia Pacific (Jakarta) | All versions | All versions | All versions |
| Asia Pacific (Malaysia) | Not available | Not available | Not available |
| Asia Pacific (Melbourne) | All versions | All versions | All versions |
| Asia Pacific (Mumbai) | All versions | All versions | All versions |
| Asia Pacific (Osaka) | Not available | Not available | Not available |
| Asia Pacific (Seoul) | All versions | All versions | All versions |
| Asia Pacific (Singapore) | All versions | All versions | All versions |
| Asia Pacific (Sydney) | All versions | All versions | All versions |
| Asia Pacific (Tokyo) | All versions | All versions | All versions |
| Canada (Central) | All versions | All versions | All versions |
| Canada West (Calgary) | Not available | Not available | Not available |
| China (Beijing) | All versions | All versions | All versions |
| China (Ningxia) | All versions | All versions | All versions |
| Europe (Frankfurt) | All versions | All versions | All versions |
| Europe (Ireland) | All versions | All versions | All versions |
| Europe (London) | All versions | All versions | All versions |
| Europe (Milan) | All versions | All versions | All versions |
| Europe (Paris) | All versions | All versions | All versions |
| Europe (Spain) | All versions | All versions | All versions |
| Europe (Stockholm) | All versions | All versions | All versions |
| Europe (Zurich) | All versions | All versions | All versions |
| Israel (Tel Aviv) | All versions | All versions | All versions |
| Middle East (Bahrain) | All versions | All versions | All versions |
| Middle East (UAE) | All versions | All versions | All versions |
| South America (São Paulo) | All versions | All versions | All versions |
| AWS GovCloud (US-East) | Not available | Not available | Not available |
| AWS GovCloud (US-West) | Not available | Not available | Not available |
Kerberos authentication with RDS for Oracle
The following Regions and engine versions are available for Kerberos authentication with RDS for Oracle.
| Region | RDS for Oracle 21c | RDS for Oracle 19c |
|---|---|---|
| US East (N. Virginia) | All versions | All versions |
| US East (Ohio) | All versions | All versions |
| US West (N. California) | All versions | All versions |
| US West (Oregon) | All versions | All versions |
| Africa (Cape Town) (opt-in Region) | All versions | All versions |
| Asia Pacific (Hong Kong) (opt-in Region) | All versions | All versions |
| Asia Pacific (Hyderabad) (opt-in Region) | All versions | All versions |
| Asia Pacific (Jakarta) (opt-in Region) | All versions | All versions |
| Asia Pacific (Malaysia) | Not available | Not available |
| Asia Pacific (Melbourne) (opt-in Region) | All versions | All versions |
| Asia Pacific (Mumbai) | All versions | All versions |
| Asia Pacific (Osaka) | Not available | Not available |
| Asia Pacific (Seoul) | All versions | All versions |
| Asia Pacific (Singapore) | All versions | All versions |
| Asia Pacific (Sydney) | All versions | All versions |
| Asia Pacific (Tokyo) | All versions | All versions |
| Canada (Central) | All versions | All versions |
| Canada West (Calgary) | Not available | Not available |
| China (Beijing) | Not available | Not available |
| China (Ningxia) | Not available | Not available |
| Europe (Frankfurt) | All versions | All versions |
| Europe (Ireland) | All versions | All versions |
| Europe (London) | All versions | All versions |
| Europe (Milan) (opt-in Region) | All versions | All versions |
| Europe (Paris) | Not available | Not available |
| Europe (Spain) (opt-in Region) | All versions | All versions |
| Europe (Stockholm) | All versions | All versions |
| Europe (Zurich) (opt-in Region) | All versions | All versions |
| Israel (Tel Aviv) (opt-in Region) | All versions | All versions |
| Middle East (Bahrain) (opt-in Region) | All versions | All versions |
| Middle East (UAE) (opt-in Region) | All versions | All versions |
| South America (São Paulo) | All versions | All versions |
| AWS GovCloud (US-East) | All versions | All versions |
| AWS GovCloud (US-West) | All versions | All versions |
Kerberos authentication with RDS for PostgreSQL
The following Regions and engine versions are available for Kerberos authentication with RDS for PostgreSQL.
| Region | RDS for PostgreSQL 16 | RDS for PostgreSQL 15 | RDS for PostgreSQL 14 | RDS for PostgreSQL 13 | RDS for PostgreSQL 12 | RDS for PostgreSQL 11 | RDS for PostgreSQL 10 |
|---|---|---|---|---|---|---|---|
| US East (N. Virginia) | All versions | All versions | All versions | All versions | All versions | All versions | All versions |
| US East (Ohio) | All versions | All versions | All versions | All versions | All versions | All versions | All versions |
| US West (N. California) | All versions | All versions | All versions | All versions | All versions | All versions | All versions |
| US West (Oregon) | All versions | All versions | All versions | All versions | All versions | All versions | All versions |
| Africa (Cape Town) | All versions | All versions | All versions | All versions | All versions | All versions | All versions |
| Asia Pacific (Hong Kong) | All versions | All versions | All versions | All versions | All versions | All versions | All versions |
| Asia Pacific (Hyderabad) | All versions | All versions | All versions | All versions | All versions | All versions | All versions |
| Asia Pacific (Jakarta) | All versions | All versions | All versions | All versions | All versions | All versions | All versions |
| Asia Pacific (Malaysia) | Not available | Not available | Not available | Not available | Not available | Not available | Not available |
| Asia Pacific (Melbourne) | All versions | All versions | All versions | All versions | All versions | All versions | All versions |
| Asia Pacific (Mumbai) | All versions | All versions | All versions | All versions | All versions | All versions | All versions |
| Asia Pacific (Osaka) | Not available | Not available | Not available | Not available | Not available | Not available | Not available |
| Asia Pacific (Seoul) | All versions | All versions | All versions | All versions | All versions | All versions | All versions |
| Asia Pacific (Singapore) | All versions | All versions | All versions | All versions | All versions | All versions | All versions |
| Asia Pacific (Sydney) | All versions | All versions | All versions | All versions | All versions | All versions | All versions |
| Asia Pacific (Tokyo) | All versions | All versions | All versions | All versions | All versions | All versions | All versions |
| Canada (Central) | All versions | All versions | All versions | All versions | All versions | All versions | All versions |
| Canada West (Calgary) | Not available | Not available | Not available | Not available | Not available | Not available | Not available |
| China (Beijing) | All versions | All versions | All versions | All versions | All versions | All versions | All versions |
| China (Ningxia) | All versions | All versions | All versions | All versions | All versions | All versions | All versions |
| Europe (Frankfurt) | All versions | All versions | All versions | All versions | All versions | All versions | All versions |
| Europe (Ireland) | All versions | All versions | All versions | All versions | All versions | All versions | All versions |
| Europe (London) | All versions | All versions | All versions | All versions | All versions | All versions | All versions |
| Europe (Milan) | All versions | All versions | All versions | All versions | All versions | All versions | All versions |
| Europe (Paris) | All versions | All versions | All versions | All versions | All versions | All versions | All versions |
| Europe (Spain) | All versions | All versions | All versions | All versions | All versions | All versions | All versions |
| Europe (Stockholm) | All versions | All versions | All versions | All versions | All versions | All versions | All versions |
| Europe (Zurich) | All versions | All versions | All versions | All versions | All versions | All versions | All versions |
| Israel (Tel Aviv) | All versions | All versions | All versions | All versions | All versions | All versions | All versions |
| Middle East (Bahrain) | All versions | All versions | All versions | All versions | All versions | All versions | All versions |
| Middle East (UAE) | All versions | All versions | All versions | All versions | All versions | All versions | All versions |
| South America (São Paulo) | All versions | All versions | All versions | All versions | All versions | All versions | All versions |
| AWS GovCloud (US-East) | Not available | Not available | Not available | Not available | Not available | Not available | Not available |
| AWS GovCloud (US-West) | Not available | Not available | Not available | Not available | Not available | Not available | Not available |
Kerberos authentication with RDS for SQL Server
The following Regions and engine versions are available for Kerberos authentication with RDS for SQL Server.
| Region | RDS for SQL Server 2022 | RDS for SQL Server 2019 | RDS for SQL Server 2017 | RDS for SQL Server 2016 |
|---|---|---|---|---|
| US East (N. Virginia) | All versions | All versions | All versions | All versions |
| US East (Ohio) | All versions | All versions | All versions | All versions |
| US West (N. California) | All versions | All versions | All versions | All versions |
| US West (Oregon) | All versions | All versions | All versions | All versions |
| Africa (Cape Town) | All versions | All versions | All versions | All versions |
| Asia Pacific (Hong Kong) | All versions | All versions | All versions | All versions |
| Asia Pacific (Hyderabad) | All versions | All versions | All versions | All versions |
| Asia Pacific (Malaysia) | Not available | Not available | Not available | Not available |
| Asia Pacific (Melbourne) | All versions | All versions | All versions | All versions |
| Asia Pacific (Mumbai) | All versions | All versions | All versions | All versions |
| Asia Pacific (Osaka) | All versions | All versions | All versions | All versions |
| Asia Pacific (Seoul) | All versions | All versions | All versions | All versions |
| Asia Pacific (Singapore) | All versions | All versions | All versions | All versions |
| Asia Pacific (Sydney) | All versions | All versions | All versions | All versions |
| Asia Pacific (Tokyo) | All versions | All versions | All versions | All versions |
| Canada (Central) | All versions | All versions | All versions | All versions |
| Canada West (Calgary) | Not available | Not available | Not available | Not available |
| China (Beijing) | All versions | All versions | All versions | All versions |
| China (Ningxia) | All versions | All versions | All versions | All versions |
| Europe (Frankfurt) | All versions | All versions | All versions | All versions |
| Europe (Ireland) | All versions | All versions | All versions | All versions |
| Europe (London) | All versions | All versions | All versions | All versions |
| Europe (Milan) | All versions | All versions | All versions | All versions |
| Europe (Paris) | All versions | All versions | All versions | All versions |
| Europe (Spain) | All versions | All versions | All versions | All versions |
| Europe (Stockholm) | All versions | All versions | All versions | All versions |
| Europe (Zurich) | All versions | All versions | All versions | All versions |
| Israel (Tel Aviv) | Not available | Not available | Not available | Not available |
| Middle East (Bahrain) | All versions | All versions | All versions | All versions |
| Middle East (UAE) | All versions | All versions | All versions | All versions |
| South America (São Paulo) | All versions | All versions | All versions | All versions |
| AWS GovCloud (US-East) | All versions | All versions | All versions | All versions |
| AWS GovCloud (US-West) | All versions | All versions | All versions | All versions |
