AWS Directory Service

0

Currently, we have an on-prem Active Directory. We also have a disaster recovery environment that is connected also in our on-prem AD. Once our on-prem get down, there will be no SSO or domain for our servers. We are thinking of using AWS Directory Service to extend our on-prem AD to AWS Cloud, and as a solution also for disaster recovery.

Is this possible? Once we configured this service, do the servers or users will still be able to connect using their AD accounts or domain if our on-prem AD fails? What will happen to the AWS Directory Service if it lost the connection to our on-prem AD?

질문됨 2년 전537회 조회
1개 답변
2

Yes, it is possible using a combination of AWS services.

However it's more of a Microsoft AD question than an AWS Managed AD question.

If your main concern is DR and not willing to move the AD into the cloud, then one option you have is to use AWS Elastic Disaster Recovery (DRS), the next generation of CloudEndure DR. What it does is to have a block level replication of your on-prem AD servers into the cloud and you can launch it when you needed to during an incident. In that approach the AD controllers in the cloud will act very similar to your on-prem AD. There might be some down time when you spining up new AD servers on the cloud, but it should be minimal, and your users can reconnect as normal after that.

You also have the options to use AWS Managed AD. However, in that case you it would be a different forest, which might not address your DR needs.

Lastly you had the option to host your AD on EC2 and add them as domain controllers to your existing AD.

I know many customers are cost conscious, but I do recommend you think about migrate the Active Directory completely to the cloud. Using AWS Managed AD cross region replication, you have a fully managed AD solution that can help you achieve the SLAs you are looking for.

Jason_S
답변함 2년 전

로그인하지 않았습니다. 로그인해야 답변을 게시할 수 있습니다.

좋은 답변은 질문에 명확하게 답하고 건설적인 피드백을 제공하며 질문자의 전문적인 성장을 장려합니다.

질문 답변하기에 대한 가이드라인