Can you not use AD connector in this situation? They already have AD on prem so i thought it could be easy to use the AD connector to point to the existing on prem AD and use the sign-ins. Can someone please explain why D is not a valid answer? Thanks
A client wants help setting up a way to manage access to the AWS Console and various services on AWS for their employees. They are starting out small but expect to provide AWS-hosted services to their 20,000 employees within the year. They currently have Active Directory on-premises, use VMware to host their VMs. They want something that will allow for minimal administrative overhead and something that could scale out to work for their 20,000 employees when they have more services on AWS. Due to audit requirements, they need to ensure that the solution can centrally log sign-in activity. Which option is best for them?
The answer to this can be found in reading the specs and limitations of AD connector, and understanding what it is intended for.
=== Content removed ===
The intent of these forums is to provide to aid students to learn by engaging in discussion and share ideas and opinions. Sometimes that involves posting a question to discuss a point. However when you post a question we expect you to also include your diagnosis of the question and opinion of the issue plus a question about the specific issue you are having trouble with.
Simply dropping a question and the answers in the forum and expecting others to solve it for you is not considered acceptable. Please feel welcome to post the question again but include your own analysis and a question about the issue that you are struggling with.
Unfortunately, this stance has been necessitated by people abusing this site to support dishonest people profiting from question theft in breach of the NDA of this and other legitimate training sites.