AWS Directory Services
PreviousNetwork Controls and Security Groups OverviewNextAWS Identity and Access Management (IAM) and Security Services
Last updated
Was this helpful?
Last updated
Was this helpful?
Cloud-native directory designed for application use
Optimized for sharing access to hierarchical data
Best suited for applications that need to:
Access hierarchical data structures
Maintain complex relationships within data
Provides scalable sign-up and sign-in functionality
Capable of handling millions of users
Features federation with popular social media services
Ideal for:
Consumer-facing applications
Software as a Service (SaaS) implementations
Key benefit: Eliminates need to build custom authentication systems
Fully managed Microsoft AD implementation
Runs on Windows Server 2012 R2
Available in Standard or Enterprise editions
Designed for organizations requiring hosted Microsoft AD solution
Connects AWS to existing on-premises Active Directory
Key features:
Enables single sign-on for existing AD users
Allows EC2 instances to join AD domain
Requires existing Active Directory infrastructure
Can use existing AD users with IAM roles for access
Supports multi-factor authentication with existing RADIUS-based MFA infrastructure
Low-cost, low-scale Active Directory implementation
Built on Samba
Ideal for basic user directory authentication needs
Features:
Supports user accounts, groups, policies, and domains
Provides Kerberos-based SSO
Limitations:
Does not support multi-factor authentication
No trust relationship capabilities
Cannot integrate with existing AD infrastructure
Requires existing Active Directory
Supports MFA with RADIUS
Enables integration with existing AD infrastructure
Provides IAM role integration for AD users
Standalone directory service
No MFA support
No trust relationships
Basic AD-compatible features
Kerberos SSO support
