Basic information
| Field | Details |
|---|---|
| English / full name | AWS Directory Service |
| Chinese | 托管目录与 Active Directory 集成 |
| Japanese | マネージドディレクトリと Active Directory 連携 |
| Review priority | 考试频率 ⭐⭐⭐⭐ |
| Often confused with | Managed Microsoft AD / AD Connector / Simple AD / IAM Identity Center |
In one sentence
Select Managed Microsoft AD, AD Connector, or Simple AD according to where identities live and whether an on-premises AD already exists.
Core summary
Managed Microsoft AD is a real Microsoft AD in AWS; AD Connector proxies authentication to on-premises AD; Simple AD is an independent AD-compatible directory.
Study points
- Use Managed Microsoft AD for a cloud-hosted Microsoft AD and trust relationships.
- Use AD Connector to reuse on-premises credentials without storing users in AWS.
- Use Simple AD for a small standalone directory without on-premises integration.
- IAM Identity Center still provides workforce SSO across accounts.
Common pitfalls
- Directory Service, IAM Identity Center, and Cognito solve different identity problems.
- Simple AD cannot establish a trust with on-premises AD.
Key memory
Cloud AD: Managed Microsoft AD; proxy: AD Connector; standalone: Simple AD.