Share your directory

AWS Managed Microsoft AD integrates tightly with AWS Organizations to allow seamless directory sharing across multiple AWS accounts. You can share a single directory with other trusted AWS accounts within the same organization or share the directory with other AWS accounts that are outside your organization. You can also share your directory when your AWS account is not currently a member of an organization.

Note

AWS charges an additional fee for directory sharing. To learn more, see the Pricing page on the AWS Directory Service web site.

Directory sharing makes AWS Managed Microsoft AD a more cost-effective way of integrating with Amazon EC2 in multiple accounts and VPCs. Directory sharing is available in all AWS regions where AWS managed Microsoft AD is offered.

Note

In the AWS China (Ningxia) Region, this feature is available only when using AWS Systems Manager (SSM) to seamlessly join your Amazon EC2 instances.

For more information about directory sharing and how to extend the reach of your AWS Managed Microsoft AD directory across AWS account boundaries, see the following topics.

Topics

• Key directory sharing concepts
• Tutorial: Sharing your AWS Managed Microsoft AD directory for seamless EC2 domain-join
• Unshare your directory

Additional resources

• Use case: Share your directory to seamlessly join amazon EC2 instances to a domain across AWS accounts

• AWS security blog article: How to join Amazon EC2 instances from multiple accounts and VPCs to a single AWS Managed Microsoft AD directory

• Joining your Amazon RDS DB instances across accounts to a single shared domain