skills.rest
sakicodes
sakicodesCOMMUNITY
Explore all skills by this author →
GitHub

rds-db2

Provisions, migrates, and operates Amazon RDS for Db2 instances via AWS CLI workflows.

Updated Jul 1, 2026
Search Tags:#database migration#kms#aws cli#kerberos#mainframe#db2#amazon rds
One-click install
npx skills add https://github.com/sakicodes/BuildFestHackathon26 --skill rds-db2-sakicodes
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: rds-db2
Source: https://github.com/sakicodes/BuildFestHackathon26/tree/main/.agents/skills/rds-db2
Command: npx skills add https://github.com/sakicodes/BuildFestHackathon26 --skill rds-db2-sakicodes

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve? Running IBM Db2 on Amazon RDS involves managed-service constraints (no host access, no unfenced C/COBOL procedures, Secrets Manager password rotation) and complex workflows like IBM BYOL licensing, z/OS mainframe migration, TLS connectivity, and cross-region DR that are easy to get wrong without deep, scattered documentation. ## Core Features & Use Cases - Provisioning & Licensing: Create RDS for Db2 instances with IBM customer/site IDs, BYOL parameter groups, customer-managed KMS keys (BYOK), and GovCloud support. - Migration: Move from Db2 LUW (Linux, AIX, Windows, AS400) or z/OS mainframe using ADB2GEN schema conversion, Q Replication, DMS full load, and S3 backup/restore with rollforward. - Operations & Security: Configure TLS connectivity, Multi-AZ and cross-region standby replicas, self-managed Active Directory Kerberos, Db2 audit to S3, least-privilege IAM, and RDSADMIN stored procedures. - Use Case: A team migrating a Db2 for z/OS mainframe workload gets routed guidance on ADB2GEN (not SCT), EBCDIC-to-UTF-8 code page planning, and near-zero-downtime cutover via Q Replication. ## Quick Start Ask the assistant to provision an encrypted Amazon RDS for Db2 instance with BYOL licensing and connect to it over TLS from an EC2 client.

Frequently Asked Questions about rds-db2

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I migrate Db2 for z/OS to Amazon RDS for Db2?▼

Use ADB2GEN for schema conversion since AWS SCT does not support Db2 for z/OS sources. For near-zero downtime use Q Replication (IBM IIDR), Qlik Replicate, or Precisely, because AWS DMS supports full load only from z/OS. Plan EBCDIC-to-UTF-8 code page conversion explicitly to avoid silent data corruption.

How do I restore a Db2 backup from S3 to RDS for Db2?▼

Attach an IAM role with the S3_INTEGRATION feature, tune restore parameters via rdsadmin.set_configuration, then call rdsadmin.restore_database with database name, mode, S3 prefix, bucket, and region. For ONLINE restores, follow with rdsadmin.rollforward_database and rdsadmin.complete_rollforward, monitoring progress via rdsadmin.get_task_status.

Why does SQL30082N appear after my RDS for Db2 password worked before?▼

SQL30082N after a previously working connection almost always means RDS rotated the master password in Secrets Manager. Run db2_use <instance-id> to fetch the current password and rewrite ~/.db2env, or pull the new secret manually with aws secretsmanager get-secret-value.

Does RDS for Db2 support unfenced C or COBOL stored procedures?▼

No, unfenced external stored procedures in C and COBOL are not supported on RDS for Db2; all routines must be fenced. Rewrite them in Java using sqlj.install_jar or in SQL PL, prioritizing the most frequently called procedures first.

Can I encrypt an existing unencrypted RDS for Db2 instance with my own KMS key?▼

Encryption cannot be enabled in place on an existing instance. Create a snapshot, copy it with copy-db-snapshot specifying your customer-managed KMS key, then restore a new encrypted instance from that encrypted snapshot.

How do I create a cross-region standby replica for RDS for Db2?▼

Use create-db-instance-read-replica with --replica-mode mounted and the cross-region source ARN. Prerequisites are automated backups enabled on the source, a custom parameter group and KMS key in the target region, and all databases in active state. Mounted replicas accept no reads and exist purely for DR promotion.

Related Skills

Explore More Software Engineering Skills→
awsaws
2.5k

dms-schema-conversion

Converts database schemas between heterogeneous engines using AWS DMS Schema Conversion.

Official
Advanced
dennisvinkdennisvink

rds-db2

Provisions, migrates, secures, and operates Amazon RDS for Db2 instances.

Community
Advanced
awsaws
2.3k

creating-secrets-using-best-practices

Automate AWS Secrets Manager secret creation with encryption, rotation, and auditing.

Official
Advanced
awsaws
2.5k

rds-db2

Provisions, migrates, secures, and operates Amazon RDS for Db2 instances.

Official
Advanced