Getting started with AWS Private CA Connector for Active Directory
With AWS Private CA Connector for Active Directory, you can issue certificates from your private CA to your Active Directory objects for authentication and encryption. When you create a connector, AWS Private Certificate Authoritycreates an endpoint for you in your VPC for your directory objects to request certificates.
To issue certificates, you create a connector and AD-compatible templates for the connector. When you create a template, you can set enrollment permissions for your AD groups.