Security - AWS Directory Services

Question 1

What is AWS Cloud Directory?

Answer 1

cloud-native directory services for cloud applications that need hierachical data with complex relationships

Question 2

What is Amazon Cognito?

Answer 2

federated sign-up and sign-in functionality that scales millions of users; best for developing consumer apps and SaaS

Question 3

What is AWS directory services for Microsoft AD?

Answer 3

AWS fully managed Microsoft AD running on Windows 2012 R2; best for enterprises that host Microsoft and require LDAP for Linux apps

Question 4

What is AWS connector?

Answer 4

allow on-premise users to log into AWS services with existing credentials and allows EC2s to join the domain; best for sign-on for on-prem employees

Question 5

What is Simple AD?

Answer 5

low scale, low cost samba AD; best for simple user directory and or LDAP compatibility

Question 6

What is the difference between AD connector and Simple AD?

Answer 6

AD connector must have existing AD, exising AD users can access AWS assets and support radius based MFA; Simple AD is a stand-alone AD; support user accounts, groups, policies and domains, kerberos based SSO, no MFA and no trust relationships