A global IT firm has a Hybrid connectivity for its applications servers deployed across on-premise Data Centre & AWS Cloud infrastructure. Developers have designed a new application that will be deployed at both locations & are expecting to be accessed by 4000 users globally. Customer Security Team requires the same security policies to be applied to users when accessing new applications from on-premise servers or AWS Cloud. A customer has already deployed an Active directory on-premise with all security compliance. The IT Head has informed you about budget constraints & no additional cost should be incurred for a new solution.
Which of the following can be used to design AD services for new applications?

Answer options:

A.Use AWS Active Directory Service.
B.Use Simple AD
C.Use AD Connector.
D.Use Amazon EC2 instance with Active Directory installed.

Correct Answer: C
Using an AD connector, customers can use existing AD deployed at on-premise servers. For this, no additional deployment is required, just over existing VPN /DX connectivity. All requests can be forwarded to on-premise AD. With this, the same security policies can be applied for both on-premise & users accessing from the cloud. With AWS Managed Active Directory Service or deploying AD on Amazon EC2 instance, additional cost will incur to deploy separate AD in AWS cloud. Simple AD does not forward requests to on-premise AD. So security policies cannot be the same.
Option A is incorrect since the customer is looking for no additional cost for setting a new Active Directory. Existing AD deployed at an on-premise location can be used.
Option B is incorrect as with Simple AD, Policies cannot be implemented same for on-premise & In AWS.
Option D is incorrect as using the Amazon EC2 instance will incur additional costs.
For more information on Active Directory Connector, refer to the following URL-
https://docs.aws.amazon.com/directoryservice/latest/admin-guide/directory_ad_connector.html