Download DocumentDB JDBC Driver

Download the DocumentDB JDBC driver, copy the JDBC URL into DbSchema, and start designing schemas with ER diagrams — free Community Edition.

About the DocumentDB JDBC driver

A JDBC driver is a Java .jar library that lets applications connect to DocumentDB. DbSchema uses JDBC to reverse engineer schemas, run SQL, and generate documentation. Driver files are usually published by the database vendor or an open-source project.

JDBC URL format

Host, port, database name, and SSL options are passed in a URL starting with jdbc:. Each DocumentDB driver uses its own syntax — see the connection details below.

The DocumentDB JDBC driver

Amazon DocumentDB (with MongoDB compatibility) is AWS's managed document database service, providing MongoDB-compatible query operations on data stored in a proprietary storage engine. It is used for JSON document workloads where managed infrastructure and AWS integration are priorities.

The DocumentDB JDBC Driver is the same as the MongoDB driver, since Amazon DocumentDB is wire-compatible with MongoDB.

Download DocumentDB JDBC Driver

The driver archive is a zip file. Extract it and load the .jar files using DbSchema's Driver Manager.

Reaching a DocumentDB Cluster

A DocumentDB cluster has no public endpoint at all. It can only be reached from inside its VPC, so unlike every other cloud database here there is no allowlist to add your address to — a tunnel is the route, not a fallback.

1. Open an SSH tunnel through an EC2 instance in the same VPC. Forward a local port to the cluster endpoint, for example ssh -i key.pem -L 27017:my-cluster.cluster-abc123.eu-central-1.docdb.amazonaws.com:27017 ubuntu@my-ec2-host -N. DbSchema can also open the tunnel itself through Setup SSH Tunnel... in the Connection Dialog.
2. Download the Amazon RDS CA bundle. TLS is on by default for new clusters. Fetch https://truststore.pki.rds.amazonaws.com/global/global-bundle.pem and point the connection at it.
3. Skip host name validation on a tunnelled connection. Through a tunnel you connect to localhost while the certificate names the cluster, so the host name will not match. AWS documents allowing invalid host names for exactly this case — the encryption still applies, only the name check is relaxed.
4. Connect directly, not in replica set mode. Use the cluster endpoint with directConnection=true and leave replicaSet out. Replica set discovery hands back the members' private addresses, which your tunnel does not reach, and the connection then fails.

DbSchema ships this combination ready-made: pick the via SSH Tunnel entry in the Connection Mode combo, which already sets directConnection, TLS and the relaxed host name check.

DbSchema and Amazon DocumentDB

DbSchema connects to Amazon DocumentDB using the MongoDB-compatible JDBC driver and renders collections and their inferred schemas as visual diagrams. Use DbSchema to explore document structures and run MongoDB-compatible queries.