- Low-cost directory service based on Samba 4. - Not a MS AD and wond work for large enterprise and complex environment. - No trust relationships - 10 Directory limit

AWS Directory Service Flashcards by Host Mom

What is the group of products belonging to Azure Directory Services?

Simple AD
Microsoft Active Directory
AD Connector
Amazon Cognets
Amazon Cloud Directory

How well did you know this?

Not at all

Perfectly

What is SimpleAD?

Low-cost directory service based on Samba 4.
Not a MS AD and wond work for large enterprise and complex environment.
No trust relationships
10 Directory limit

How well did you know this?

Not at all

Perfectly

What is Microsoft Active Directory?

It is an MS cluster (HA), in Multi AZ.
No federation
Not for large scale applications
More expensive then SimpleAD

How well did you know this?

Not at all

Perfectly

What AD Connector

It is a proxy that bridges between on-prem and AD

How well did you know this?

Not at all

Perfectly

I require an enterprise level AD, should i use SimpleAD or Microsoft AD services from AWS?

No, both are not suitable for large scale enterprise-level deployments.
Simple AD is Samba 4 and may not have 100% compatibility and functionality as expected by the enterprise application.
Both are limited in size.

How well did you know this?

Not at all

Perfectly

I need a 100% AD comp[atable directory service, what options do I have?

Use AWS Microsoft Active Directory service.

How well did you know this?

Not at all

Perfectly

I wnat to create SSO with SimpleAD and AWS console, is this possible?

Yes

How well did you know this?

Not at all

Perfectly

I wnat to create SSO with SimpleAD and AWS console, is this possible?

Yes

How well did you know this?

Not at all

Perfectly

I wnat to create SSO with AWS Microsoft Active Directory and AWS console, is this possible?

Yes

How well did you know this?

Not at all

Perfectly

I require an AD trust with existing AD, can I use Simple AD and if not what option do I have?

No, SimpleAD dose does not support trust relationships, but you can use AWD Mcrosoft AD.

How well did you know this?

Not at all

Perfectly

I have an on-prem AD and I to connect AWS workspaces with it, what options do I have?

Use AWS AD Connector

How well did you know this?

Not at all

Perfectly

What does AD connector do?

Its is provisioned in your VPC so you cna connect to it from both AWS services like IAM for SSO and also form EC2 instances wanting to join a domain. It extends the existing AD on-prem by connecting with the on-prem AD.

How well did you know this?

Not at all

Perfectly

What does AWS cogneto provide?

Mobile directory services and federation with Facebook and Google.

How well did you know this?

Not at all

Perfectly

What does AWS cogneto provide?

Web & Mobile directory services and federation with Facebook and Google.

How well did you know this?

Not at all

Perfectly

Is SimpleAD, Microsoft AD and AD Connector all highly available?

Yes, they are all put in multiple AZs.

How well did you know this?

Not at all

Perfectly

I need a 100% compatible Active Directory in AWS, that is my best option?

We would not use Simple AD as it is not 100% compatible, we would use Microsoft Directory Service form AWS. This is a managed service from AWS and gives you a 100% compatible Microsoft AD.

How well did you know this?

Not at all

Perfectly

I have an AWS Microsoft Active Directory service deployed in my AWS account, I need to use web federation, what is my best option?

You can use when federation with AWS Microsoft AD

I am considering using AWS Microsoft Active Directory for a large scale AWS deployment, is AWS Microsoft AD a suitable option?

No, not for large scale and complex environments and is more suited to small to low-mid customers for small scale deployments.

I have been asked to implement an AWS Simple AD (LDAP), I have also been asked to make sure the deployment is highly available, what is my best option?

Use AWS Simple AD.

For Simple AD how many users can it support?

500 (small ) 5K (Large)

Can I use SimpleAD to create a trust relationship with an on-prem server?

No, this is not supported and you may be better to use AWS Microsoft AD service from AWS.

When Microsoft Active Directory is deployed, is it deployed as highly available?

Yes, there are two AZs and a primary and secondary AD.

I have an on-prem AD and I am extending my data centre into the AWS cloud, I wnat to create an AD in the AWS and set up a trust relationship between my on-prem AD and my new AWS AD I will be deploying. I have two options for ADS in AWS, Simple AD and Microsoft Active Directory, which is the most suitable option?

Microsoft AD as Simple AD does not allow trust relationships.

I have an on-prem AD and I wnat to use it as a directory service for the VM’s in my VPC, how cna I set this up?

Use AWS AD Connector, it will enable you to send the AD traffic from my VPC to the on-prem AD over VPN or DirectConnect.

I want to use SAMBA4 for 500 users, what do I need to set up?

Use Directory service and set up a simple active directory as a small.

Is a simple active directory highly available or a single server?

It is highly available and two nodes are deployed to two availability zones.

I want to use SAMBA4 for 5000 users, what do I need to set up?

Use Directory service and set up a simple active directory as a large.

I am thinking of using the simple active directory for use where I need 100% Microsoft active directory compatibility, is this my best option and will it work?

No, it is not a good option as the simple active directory is not 100% Microsoft active directory compatible.

I have an on-prem AD and I am intending setting up an AWS VPC based active directory where I will set up a trust relationship between the on-prem and the AWS based active directory, I am thinking of using simple active directory because it is lower cost then Microsoft Active Directory, is this a good option?

No, the simple active directory does not support trust relationships, you will have to use Microsoft Active Directory.

I am setting up workspaces and I need an active directory, I have 500 users and I not need 100% Microsoft compatible AD, for workspaces what active directory would be best suited here?

The simple active directory would work here as we have 500 users and do not need 100% compatible Microsoft active directory.

How can I administrate the active directory (Simple AD) instances deployed by AWS?

Use the remove AD tooling, you can create a Windows instance in the same VPC and subnet and connect and admin.

I need to provide single sign-on for the AWS console, I do not need Microsoft compatibility as I will be setting up a trust relationship, how can I do this?

I can set up a Microsoft Active Directory and create a trust relationship with on-prem and then make the Microsoft Active Directory perform the SSO.

I am using AWS Workspaces and I wnat to be able to have people use there own corporate ID to log on to workspaces?

AD Connector is one operation here, you cna use AD Connector to root auth requests to the on-prem AD.

I wnat to use my on-prem AD and have people single sign-on to the AWS Portal, should I use AS Connector?

No, AD Connector will enable you to use your on-prem AD for people logging in but users have to enter there creds twice as this is not single-sign-on. For single-on, you have have use federated access with SAML..

I have my on-prem using MFA and I wnat to enable MFA for logging into the AWS Portal, how can I do this?

You can use AD Connector to auth requests to the on-prem AD thet already used MFA.

I have a Simple AD deployed and I wnat to have the users in the Simple AD log on to the AWS Portal, should I set up AD connector?

No, there is no need to set up AD Connector, Simple AD has an option to be directly used by the AWS to enable users to log in to the AWS portal using Simple AD.

I have an AWS Microsoft Active Directory deployed and I wnat to have the users in the Simple AD log on to the AWS Portal, should I set up AD connector?

No, there is no need to set up AD Connector, AWS Microsoft Active Directory has an option to be directly used by the AWS to enable users to log in to the AWS portal using Microsoft Active Directory.

Describe the architecture used by AWS when they deploy Simple AD, meaning, describe the network and high-availability structure?

Simple AD is deployed in two subnets in two AZ, you select then when you creating the Simple AD.

Describe the architecture used by AWS when they deploy AWS Microsoft Active Directory, meaning, describe the network and high-availability structure?

AWS Microsoft Active Director is deployed in two subnets in two AZ, you select then when you creating the AWS Microsoft Active Director.

What is a custom access role used for?

This is used when you are using Simple AD, AD Connector or AWS Microsoft Active Directory to provide sign-on for the portal, it is the URL users go to log-on.