skills.rest
aws
awsOFFICIAL
Explore all skills by this author →
WebsiteGitHub

rds-db2

Provisions, migrates, secures, and operates Amazon RDS for Db2 instances.

2.5k|282|Updated Apr 23, 2026
Search Tags:#AWS#mainframe#db2#KMS#Database migration#Kerberos#RDs
One-click install
npx skills add https://github.com/aws/agent-toolkit-for-aws --skill rds-db2
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: rds-db2
Source: https://github.com/aws/agent-toolkit-for-aws/tree/main/skills/specialized-skills/database-skills/rds-db2
Command: npx skills add https://github.com/aws/agent-toolkit-for-aws --skill rds-db2

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

Running IBM Db2 on Amazon RDS involves managed-service constraints that general Db2 knowledge misses: no unfenced C/COBOL stored procedures, Secrets Manager password rotation breaking clients with SQL30082N, RDSADMIN procedures replacing SYSCTRL authority, and AWS-specific migration tooling limits like DMS lacking CDC support for z/OS sources. This Skill provides the exact CLI commands, procedure signatures, and prerequisite checks needed to provision, connect, migrate, and operate RDS for Db2 correctly.

Core Features & Use Cases

  • Provisioning and Licensing: Create instances with IBM customer/site IDs for BYOL, GovCloud, customer-managed KMS keys (BYOK), and mandatory resource tagging.
  • Connectivity and Security: Install Db2 clients online or airgap, configure TLS with region certificate bundles, join self-managed Active Directory with Kerberos, and enable Db2 audit to S3.
  • Migration and HA/DR: Migrate from Db2 LUW or z/OS mainframe (ADB2GEN, Q Replication), choose code pages and collation (EBCDIC, CCSID), restore multi-part backups from S3, and configure Multi-AZ or cross-region standby replicas.
  • Use Case: A team migrating a Db2 for z/OS mainframe workload asks for near-zero downtime cutover. The Skill routes to the mainframe-migration reference, explains that DMS supports full load only from z/OS, recommends Q Replication for CDC, and walks through ADB2GEN schema conversion and EBCDIC-to-UTF-8 code page planning.

Quick Start

Ask the agent to provision a new RDS for Db2 instance with BYOL licensing and TLS connectivity, or describe your migration source such as Db2 on AIX or z/OS to get a routed, step-by-step plan.

Frequently Asked Questions about rds-db2

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I migrate Db2 for z/OS to Amazon RDS for Db2 with near-zero downtime?▼

Use Q Replication (IBM IIDR), Qlik Replicate, or Precisely for CDC from z/OS sources, since AWS DMS supports full load only from Db2 for z/OS. Use ADB2GEN for schema conversion because AWS SCT does not support z/OS sources, and plan EBCDIC-to-UTF-8 code page mapping before cutover.

How do I restore a Db2 backup from S3 to RDS for Db2?▼

Attach an IAM role with the S3_INTEGRATION feature, tune restore parameters via rdsadmin.set_configuration, then call rdsadmin.restore_database with database name, mode, S3 prefix, bucket, and region. For ONLINE restores, follow with rdsadmin.rollforward_database and rdsadmin.complete_rollforward.

Why does my RDS for Db2 connection fail with SQL30082N?▼

SQL30082N after a previously working connection almost always means the master password rotated in Secrets Manager. Run db2_use <instance-id> to fetch the current password and rewrite ~/.db2env, then verify with db2_test_connection.

Does RDS for Db2 support unfenced C or COBOL stored procedures?▼

No, unfenced external stored procedures in C and COBOL are not supported on RDS for Db2; all routines must be fenced. Rewrite them in Java using sqlj.install_jar or in SQL PL, prioritizing the rewrite by call frequency.

Can I encrypt an existing unencrypted RDS for Db2 instance with a customer-managed KMS key?▼

Encryption cannot be added in place; it is set at instance creation with --storage-encrypted --kms-key-id. For an existing instance, take a snapshot, copy it with copy-db-snapshot --kms-key-id, then restore a new encrypted instance from that snapshot.

How do I create a cross-region standby replica for RDS for Db2?▼

Use aws rds create-db-instance-read-replica with --replica-mode mounted and the cross-region source ARN. Prerequisites are automated backups enabled on the source, a custom parameter group and KMS key in the target region, and all databases in active state; mounted replicas do not accept reads.

Related Skills

Explore More Software Engineering Skills→
aws-samplesaws-samples
12

rds-aurora

Design scalable and secure AWS RDS/Aurora databases with HA and migration plans.

Official
Advanced
awslabsawslabs
15

observability

Design AWS observability solutions with CloudWatch metrics, logs, alarms, and X-Ray tracing.

Official
Advanced
awsaws
2.3k

creating-secrets-using-best-practices

Automate AWS Secrets Manager secret creation with encryption, rotation, and auditing.

Official
Advanced
NeuroSkill-comNeuroSkill-com
11

neuroskill-protocols-breathfree

Provide non-breathing calming and cognitive reset interventions for office-safe settings.

Official
Intermediate