skills.rest
dennisvink
dennisvinkCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

rds-db2

Provisions, migrates, secures, and operates Amazon RDS for Db2 instances.

Updated Sep 8, 2026
Search Tags:#database migration#kms#aws cli#kerberos#mainframe#db2#amazon rds
One-click install
npx skills add https://github.com/dennisvink/yolomancer --skill rds-db2-dennisvink
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: rds-db2
Source: https://github.com/dennisvink/yolomancer/tree/main/skills/aws/specialized-skills/database-skills/rds-db2
Command: npx skills add https://github.com/dennisvink/yolomancer --skill rds-db2-dennisvink

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve? Running IBM Db2 on Amazon RDS involves managed-service constraints (no host access, no unfenced C/COBOL procedures, Secrets Manager password rotation) and complex workflows like BYOL licensing, mainframe migration, and Kerberos setup that generic Db2 knowledge does not cover. This Skill provides the exact AWS CLI commands, RDSADMIN procedure signatures, and troubleshooting steps for the full RDS for Db2 operator lifecycle. ## Core Features & Use Cases - Provisioning & Licensing: Create instances with IBM customer/site IDs (BYOL, License Manager, GovCloud), parameter groups, and customer-managed KMS keys (BYOK) with multi-region replication. - Connectivity & Security: Install Db2 clients online or airgap, configure TLS with region certificate bundles, join self-managed Active Directory for Kerberos auth, and enable Db2 audit to S3. - Migration & DR: Migrate from Db2 LUW (Linux/AIX/Windows/AS400) or z/OS mainframe (ADB2GEN, Q Replication), restore multi-part backups from S3 with rollforward, and configure Multi-AZ and cross-region mounted standby replicas. - Use Case: A team migrating a Db2 for z/OS mainframe workload gets routed guidance: ADB2GEN for schema conversion (not AWS SCT), Q Replication for near-zero-downtime CDC (DMS is full-load only from z/OS), and EBCDIC-to-UTF-8 code page planning. ## Quick Start Ask the assistant to provision an encrypted RDS for Db2 instance with BYOL licensing, or to diagnose a SQL30082N connection error after a Secrets Manager password rotation.

Frequently Asked Questions about rds-db2

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I migrate Db2 for z/OS to Amazon RDS for Db2 with near-zero downtime?▼

Use Q Replication (IBM IIDR), Qlik Replicate, or Precisely for CDC from z/OS sources, since AWS DMS supports full load only from Db2 for z/OS. Convert schemas with ADB2GEN rather than AWS SCT, and plan EBCDIC-to-UTF-8 code page and collation mapping before cutover.

How do I restore a Db2 backup from S3 into RDS for Db2?▼

Attach an IAM role with the S3_INTEGRATION feature, tune restore parameters via rdsadmin.set_configuration, then call rdsadmin.restore_database with database name, mode, S3 prefix, bucket, and region. For ONLINE restores, follow with rdsadmin.rollforward_database and rdsadmin.complete_rollforward.

Why does my RDS for Db2 connection fail with SQL30082N?▼

SQL30082N after a previously working connection almost always means the master password rotated in Secrets Manager. Run db2_use <instance-id> to fetch the current password and rewrite ~/.db2env, or pull the secret manually with aws secretsmanager get-secret-value.

Does RDS for Db2 support unfenced C or COBOL stored procedures?▼

No, unfenced external stored procedures in C and COBOL are not supported on RDS for Db2; all routines must be fenced. Rewrite them in Java using sqlj.install_jar or in SQL PL.

Can I encrypt an existing unencrypted RDS for Db2 instance with a customer-managed KMS key?▼

Encryption cannot be enabled in place on an existing instance. Create a snapshot, copy it with copy-db-snapshot specifying your KMS key, then restore a new encrypted instance from the encrypted snapshot.

How do I set up Kerberos authentication with self-managed Active Directory on RDS for Db2?▼

Join the instance with --domain-fqdn, --domain-ou, --domain-auth-secret-arn, and --domain-dns-ips, storing the service account in Secrets Manager without a DOMAIN\ prefix. Open AD ports including RPC 49152-65535, grant servicePrincipalName via ADSI Edit, and use JDBC securityMechanism=11 with a region-specific PEM.

Related Skills

Explore More Software Engineering Skills→
obispobrunoobispobruno
1

connecting-to-data-source

Create and test AWS Glue connections to JDBC databases, Redshift, Snowflake, and BigQuery.

Community
Advanced
itsmostafaitsmostafa
1.1k

cloudwatch

Automate AWS CloudWatch monitoring setup for logs, metrics, alarms, and dashboards.

Community
Intermediate
MoneyForestMoneyForest

aws-security

Apply Terraform security patterns to AWS IAM, networking, and data protection.

Community
Advanced
awsaws
2.5k

rds-db2

Provisions, migrates, secures, and operates Amazon RDS for Db2 instances.

Official
Advanced