Skip to content

Commit b620f1b

Browse files
fix(rds): Failed to create a Database Instance with Kerberos authentication configured (#28601)
This PR resolves an issue where deploying an RDS instance configured with Kerberos authentication fails. When `domainRole` is undefined, CDK creates a default IAM role. However, this role lacks the necessary principals, leading to deployment failure. To resolve this, the necessary principals have been added to the role. ```diff - assumedBy: new iam.ServicePrincipal('rds.amazonaws.com'), + assumedBy: new iam.CompositePrincipal( + new iam.ServicePrincipal('rds.amazonaws.com'), + new iam.ServicePrincipal('directoryservice.rds.amazonaws.com'), + ), ``` Closes #28600. ---- *By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*
1 parent ef1d64e commit b620f1b

25 files changed

+4812
-4
lines changed

packages/@aws-cdk-testing/framework-integ/test/aws-rds/test/integ.instance-kerberos-without-domainRole.js.snapshot/asset.4554b47be6f57b68c6c7a7391dcc73894866d2377fe174883351e7639097f292/__entrypoint__.js

+147
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

packages/@aws-cdk-testing/framework-integ/test/aws-rds/test/integ.instance-kerberos-without-domainRole.js.snapshot/asset.4554b47be6f57b68c6c7a7391dcc73894866d2377fe174883351e7639097f292/index.js

+1
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

packages/@aws-cdk-testing/framework-integ/test/aws-rds/test/integ.instance-kerberos-without-domainRole.js.snapshot/cdk.out

+1
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

packages/@aws-cdk-testing/framework-integ/test/aws-rds/test/integ.instance-kerberos-without-domainRole.js.snapshot/instance-kerberos-without-domainRole.assets.json

+32
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

0 commit comments

Comments
 (0)