Directoryservice

Basics

• Provides managed directory, a store of users, objects & other configuration
• Directories store identity and asset related information
• It stores objects in a structure e.g. Tree
• Multiple directories can be clubbed together in a forest
• Runs within a VPC hence privat
• It can provide HA if we deploy it into multiple AZs
• Simple AD mode is essentially running SAMBA. It can be used to connect either 500 users or 5000 users
• Simple AD mode is designed to be used in isolation & not in conjunction with on premises systems
• Managed Microsoft AD Mode can be used to connect on premises directories with AWS encironment.
• A VPN or a Direct Connect connection can establish trust relationship with existing on premise AD using MS AD.
• AD Connector allows one specific service to connect with AD. AD Connector is just a proxy & does not provide any authenticatio of its own.