Reviewing AWS Directory Service
AWS Directory Service offers several choices for organizations to deploy existing applications on AWS that rely on Microsoft AD or Lightweight Directory Access Protocol (LDAP). This is the native AWS service to use when you need a directory to manage users, groups, devices, and access.
AWS Directory Service proposes different options to use Microsoft AD with AWS services, as follows:
- Simple AD: A low-scale and low-cost directory with basic Microsoft AD compatibility
- AD Connector: A proxy service to connect to a remote Microsoft AD on-premises
- Managed Microsoft AD: A Microsoft AD environment managed by AWS
The following sections will discuss the main differences between these three options and when to use one or the other.
Simple AD
Simple AD is a Microsoft AD-compatible directory that provides basic AD features such as managing user accounts, group memberships, and group policies, joining a (Linux or Windows) EC2 instance...