diff --git a/db.js b/db.js
index 5ae1d6e5..2599b864 100644
--- a/db.js
+++ b/db.js
@@ -1976,6 +1976,7 @@ module.exports.CreateDB = function (parent, func) {
         // SSL options different on mariadb/mysql
         var sslOptions = '';
         if (obj.databaseType == 4) {
+            if (props.awsrds) { cmd += ' --single-transaction'; }
             if (props.ssl) {
                 sslOptions = ' --ssl';
                 if (props.ssl.cacertpath) sslOptions = ' --ssl-ca=' + props.ssl.cacertpath;
diff --git a/meshcentral-config-schema.json b/meshcentral-config-schema.json
index bd44e2d5..e5b9f8e7 100644
--- a/meshcentral-config-schema.json
+++ b/meshcentral-config-schema.json
@@ -22,6 +22,7 @@
             "password": { "type": "string", "description": "MariaDB password" },
             "connectionLimit": { "type": "number", "description": "MariaDB connection limit" },
             "database": { "type": "string", "default": "meshcentral", "description": "Name of MariaDB database used" },
+            "awsrds": { "type": "boolean", "default": false, "description": "Set true to resolve LOCK TABLE permissions on AWS RDS." },
             "ssl": { 
               "type": "object",
               "description": "SSL Options. Set to true (boolean) for default options.",