With its own Active Directory, your company authenticates users for different applications. You have been assigned the task of consolidating and migrating services to the cloud and using the same credentials if possible. What would you recommend?

Answer options:

A.Use AWS Directory Service that allows users to sign in with their existing corporate credentials.
B.Create two Active Directories – one for the cloud and one for on-premises – reducing username/password combinations to two.
C.Require users to use third-party identity providers to log-in for all services.
D.Build out Active Directory on EC2 instances to gain more control over user profiles.

Correct Answer: A
Option A is correct. AWS Directory Service enables your end-users to use their existing corporate credentials while accessing AWS applications. Once you’ve been able to consolidate services to AWS, you won’t have to create new credentials. Instead, you’ll be able to allow the users to use their existing username/password.
Option B is incorrect. One Active Directory can be used for both on-premises and the cloud. This isn’t the best option provided.
Option C is incorrect. This won’t always reduce the number of username/password combinations.
Option D is incorrect. This requires more effort and additional management than using a managed service.
For more information, please refer to the URLs below:
https://aws.amazon.com/directoryservice/faqs
https://aws.amazon.com/directoryservice/
https://docs.aws.amazon.com/directoryservice/latest/admin-guide/what_is.html