Active Directory Domain Services on AWS

Design and Planning Guide

Publication date: November 20, 2020 (Document history)

Cloud is now the center of most enterprise IT strategies. Many enterprises find that a well-planned move to the cloud results in an immediate business payoff. Active Directory is a foundation of the IT infrastructure for many large enterprises. This whitepaper covers best practices for designing Active Directory Domain Services (AD DS) architecture in Amazon Web Services (AWS), including AWS Managed Microsoft AD, Active Directory on Amazon Elastic Compute Cloud (Amazon EC2) instances, and hybrid scenarios.

Importance of Active Directory in the cloud

Microsoft Active Directory was introduced in 1999 and became de facto standard technology for centralized management of Microsoft Windows computers and user authentications. Active Directory serves as a distributed hierarchical data storage for information about corporate IT infrastructure, including Domain Name System (DNS) zones and records, devices and users, user credentials, and access rights based on groups membership.

Tens of thousands of enterprises use Active Directory for authentication. Successful adoption of cloud technology requires considering existing IT infrastructure and applications deployed on-premises. Reliable and secure Active Directory architecture is a critical IT infrastructure foundation for companies running Windows workloads.

Are you Well-Architected?

The AWS Well-Architected Framework helps you understand the pros and cons of the decisions you make when building systems in the cloud. The six pillars of the Framework allow you to learn architectural best practices for designing and operating reliable, secure, efficient, cost-effective, and sustainable systems. Using the AWS Well-Architected Tool, available at no charge in the AWS Management Console, you can review your workloads against these best practices by answering a set of questions for each pillar.

For more expert guidance and best practices for your cloud architecture—reference architecture deployments, diagrams, and whitepapers—refer to the AWS Architecture Center.