You need to create a new Active Directory server in AWS. The server should have enough storage capacity to support up to 2000 employees and 20000 directory objects. It needs to support the federated access to sign in to the AWS Management Console using Active Directory credentials and support the integration with AWS managed services such as Amazon WorkSpaces, Amazon WorkDocs, and Amazon RDS Microsoft SQL Server. Which of the following AWS services would you choose?

Answer options:

A.Simple AD which is a Microsoft Active Directory compatible directory service powered by Samba 4.
B.AWS Directory Service for Microsoft Active Directory (standard edition).
C.Amazon Cognito User Pool which manages directories and enables the single sign-on (SSO) to AWS Management Console.
D.AD Connector that is a lightweight AWS Directory Service to connect compatible AWS applications.

Correct Answer – B
AWS Directory Service includes several types of directories (Microsoft Active Directory, Simple AD, AD Connector, Amazon Cognito User Pools and Amazon Cloud Directory) suitable for different use cases. Check the details in https://docs.aws.amazon.com/directoryservice/latest/admin-guide/what_is.html.
Option A is incorrect: Simple AD only supports basic Active Directory features. Because of the high storage capacity required, Simple AD is not the best choice.
Option B is CORRECT: Microsoft Active Directory standard edition is ideal for small and midsize businesses with up to 5,000 employees and 30,000 directory objects. It also supports a large number of AWS managed applications and services.
Option C is incorrect: Because Amazon Cognito User Pools are normally used for sign-up and sign-in to mobile apps or web applications. This option is not the best solution.
Option D is incorrect: AD Connector is a proxy service that connects compatible AWS applications to the existing on-premises Microsoft Active Directory. This question asks for an independent directory service in AWS.