AWS Directory Service
Managed Active Directory
Provides managed Microsoft Active Directory on AWS (Managed Microsoft AD), AD Connector to forward authentication to on-prem AD, or Simple AD for basic compatibility.
- Cost$$ Medium
- Difficulty●●●●●
- Costs money when idle?Yes
- Managed by AWS
- In examsSAA · SOA
Think of it asLike hiring someone to manage the staff directory and key card system for the whole company.
When to use it
✓ Use it when
Windows applications, RDS SQL Server, or WorkSpaces that need Active Directory.
✗ Avoid it when
End-user sign-in for web/mobile → Cognito; SSO for the console → IAM Identity Center.
Common uses
- Joining Windows EC2 to a domain
- Using on-prem AD accounts for WorkSpaces
- Trust between AD on AWS and on-prem
What does it cost?
- Pricing model: Charged hourly per directory by edition (Standard/Enterprise) and number of domain controllers.
Related services
SAA-C03 study guide
Directory Service is covered in these study modules: