[aws-rds] Support for joining a database instance to a domain #9869
Labels
@aws-cdk/aws-rds
Related to Amazon Relational Database
feature-request
A feature should be added or improved.
in-progress
This issue is being actively worked on.
needs-triage
This issue or PR still needs to be triaged.
CloudFormation supports joining a database instance to a domain. It would be great if the CDK construct supported setting these properties, along with creating the necessary IAM role.
Use Case
We have a AWS Managed Microsoft AD and would like to be able to use Windows authentication for SQL users.
Proposed Solution
Add a
domain
property to theDatabaseInstanceNewProps
interface and, when set, creates a new role that has the AWS managed policyAmazonRDSDirectoryServiceAccess
and sets theDomain
andDomainIAMRoleName
properties on the underlying CloudFormation resource.Other
This may need to be moved to the
DatabaseInstanceSourceProps
and related abstract class if you want to add validation to make sure that the engine type supports joining to a domain as, according to the link above, only MySQL, Microsoft SQL Server, Oracle, and PostgreSQL DB instances can be created in an Active Directory Domain.This is a 🚀 Feature Request
The text was updated successfully, but these errors were encountered: