Please enable JavaScript.
Coggle requires JavaScript to display documents.
AWS Directory Services - Coggle Diagram
AWS Directory Services
AWS Cloud Directory
Cloud native directory
Cloud apps that need hierarchical data with complex relationships
Amazon Cognito
sign in / sign off
scales to millions of users
federated to public social media services
best for consumer apps or SaaS
AWS Directory Servie for Microsoft Active Directory
fully managed MS AD (Standard for enterprises)
running on Windows Server 2012 R2
Enterprises that want to host Microsoft AD
LDAP for Linux apps
AD Connector
Allows on prem users to login using their AD credentials
SSO for on prem
EC2 to join AD domain
Simple AD
low cost
very simple
based on Samba
Simple user directory or you need LDAP compability
AD Connector vs. Simple AD
ADC: must have existing AD
ADC: Existing AD user can access AWS assets via IAM role
ADC: Supports MFA via existing RADIUS MFA
SAD: Standalone AD based on Samba
SAD: Supports user Ccounts, groups, group poicies and domains
SAD: Kerberos based SSO
SAD: no MFA
SAD: no Trust Relationship