Amazon RDS for Oracle now supports Kerberos authentication with self-managed Active Directory
Amazon Relational Database Service (Amazon RDS) for Oracle now allows customers to join their RDS for Oracle DB instances directly to their self-managed Microsoft Active Directory (AD) domain. Your self-managed AD can run on premises, on Amazon EC2, or with another cloud provider. Users in your AD domain can authenticate to RDS for Oracle DB instances using Kerberos.
Previously, in order to use Kerberos authentication with self-managed AD for their RDS for Oracle instances, customers were required to deploy Amazon Web Services Managed Microsoft AD and establish trust between Amazon Web Services managed domain and self-managed domain. Now, customers can join their existing self-managed AD directly to authenticate and authorize users without setting up an additional directory or trust relationship. You can set this up using the Amazon Management Console, Amazon CLI, or Amazon SDK. You can use self-managed AD without any additional charge.
Kerberos authentication with self-managed Active Directory in Amazon RDS for Oracle is available in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD. To learn more about Kerberos authentication with self-managed Active Directory, visit Working with self-managed Active Directory with an Amazon RDS for Oracle DB instance in the Amazon RDS User Guide.