AWS Directory Service

aws Identity provideraws-directory-service

Managed Microsoft Active Directory in a VPC, or a connector that proxies authentication to an on-premises AD.

Provider: aws
Kind: Identity provider
Category: Security
Official docs: https://docs.aws.amazon.com/directoryservice/latest/admin-guide/directory_microsoft_ad.html

Properties · 5 set by this component

property	type	values	required	kind default	this component
authorizationModel	enum	none \| rbac \| abac \| rebac	no	rbac	▸ rbac
availabilityZones · component property	integer	—	no	2	inherited
centralised · advanced	boolean	—	no	true	▸ true
directoryType · component property	enum	managed-microsoft-ad \| managed-microsoft-ad-hybrid \| ad-connector	no	managed-microsoft-ad	inherited
domainControllers · component property	integer	—	no	2	inherited
edition · component property	enum	standard \| enterprise	no	standard	inherited
managed	boolean	—	no	true	▸ true
mfa	boolean	—	no	false	▸ false
protocol	enum	oidc \| saml \| oauth2 \| iam \| custom	no	oidc	▸ custom
secureLdap · component property	boolean	—	no	false	inherited

Rules that apply · 0

Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.

No rule reads this kind yet. That is a gap, not a guarantee.

Use it in a design

nodes:
  - { id: "directory-service", component: "aws-directory-service" }

Other Identity provider products · 47

and 7 more → Identity provider page

Source

1# yaml-language-server: $schema=../../schema/component.schema.json
2# AWS Directory Service: managed Active Directory (AWS Managed Microsoft AD) or a proxy to an
3# on-premises AD (AD Connector). "AWS Managed Microsoft AD": a highly available pair of domain
4# controllers in your VPC across different Availability Zones, daily snapshots; secure LDAP over
5# SSL/TLS and MFA over RADIUS are both features you enable.
6schemaVersion: "1"
7type: "component"
8id: "aws-directory-service"
9kind: "identity-provider"
10provider: "aws"
11docs: "https://docs.aws.amazon.com/directoryservice/latest/admin-guide/directory_microsoft_ad.html"
12defaults:
13  protocol: "custom"
14  authorizationModel: "rbac"
15  centralised: true
16  mfa: false
17  managed: true
18properties:
19  directoryType:
20    type: "enum"
21    values: ["managed-microsoft-ad", "managed-microsoft-ad-hybrid", "ad-connector"]
22    default: "managed-microsoft-ad"
23  edition:
24    type: "enum"
25    values: ["standard", "enterprise"]
26    default: "standard"
27  domainControllers:
28    type: "integer"
29    default: 2
30  availabilityZones:
31    type: "integer"
32    default: 2
33  secureLdap:
34    type: "boolean"
35    default: false

The same page as markdown, for an agent: /catalogue/components/aws-directory-service.md