Customer-managed process for configuring Kerberos authentication on an Amazon RDS for SQL Server DB instance, joined to a self-managed Active Directory
Database Blog
This AWS Database Blog article details a comprehensive process for configuring Kerberos authentication on Amazon RDS for SQL Server DB instances joined to a self-managed Active Directory.
- Explains why Windows Authentication falls back to NTLM authentication by default
- Provides step-by-step guidance for implementing Kerberos authentication
- Describes how to add UPN suffixes and Service Principal Names (SPNs) to enable Kerberos
- Offers an AWS SAM template to automate SPN updates during host replacements or failovers
- Highlights the security benefits of using Kerberos over NTLM authentication
The solution improves database connection security by ensuring Kerberos authentication is used instead of the less secure NTLM protocol, with an automated approach to managing SPNs across dynamic infrastructure environments.
The AWS News Feed is currently looking for gold sponsors. If you want to support the AWS community and reach a large audience of AWS professionals, consider sponsoring the AWS News Feed.
Related articles
2025
2024
2024
2025
The AWS News Feed is currently looking for silver sponsors. If you want to support the AWS community and reach a large audience of AWS professionals, consider sponsoring the AWS News Feed.