AWS Directory Service provides multiple directory choices for customers who want to use existing Microsoft AD or Lightweight Directory Access Protocol (LDAP)–aware applications in the cloud. It also offers those same choices to developers who need a directory to manage users, groups, devices, and access. Simple AD is a Microsoft Active Directory–compatible directory from AWS Directory Service powered by Samba 4. Which below scenarios are suitable for Simple AD? Choose 3.

Answer options:

A.An operation management team needs to manage its Amazon EC2 instances and on-premises servers running Linux Ubuntu and Windows. Basic Active Directory features such as user accounts, group memberships are required.
B.For a small project, a standalone directory in the cloud is needed, where the operators can create and manage user identities and manage access to applications. The operators want to use many familiar Active Directory–aware applications and tools that require basic Active Directory features.
C.The development lead needs to set up a service that allows the on-premises users to log in to AWS applications and services with their Active Directory credentials.
D.For the directory service in AWS, the security manager requires that it can be backed up via daily automated snapshots with point-in-time recovery enabled
E.A large company is considering to set up a new directory service in AWS that can support its existing 10000 users (approximately 30,000 objects including users, groups, and computers).
F.With a limited budget, a startup company requires a directory service to be set up with basic Active Directory compatibility that supports Samba 4–compatible applications.

Correct Answer – B, D, F
 
Simple AD is a subset of the features offered by AWS Managed Microsoft AD. It has included the ability to manage user accounts and group memberships, create and apply group policies, securely connect to Amazon EC2 instances, and provide Kerberos-based single sign-on (SSO).
Simple AD offers many advantages according to https://docs.aws.amazon.com/directoryservice/latest/admin-guide/directory_simple_ad.html:
Simple AD makes it easier to manage Amazon EC2 instances running Linux and Windows and deploy Windows applications in the AWS Cloud.
Many of the applications and tools that you use today that require Microsoft Active Directory support can be used with Simple AD.User accounts in Simple AD allow access to AWS applications such as Amazon WorkSpaces, Amazon WorkDocs, or Amazon WorkMail.
You can manage AWS resources through IAM role-based access to the AWS Management Console.
Daily automated snapshots enable point-in-time recovery.
Option A is incorrect: Because Simple AD is not used to manage on-premise instances. It is a directory service in the AWS domain.
Option B is CORRECT: Because Simple AD can provide directory service with lots of existing Active Directory tools and features supported.
Option C is incorrect: Because this is suitable for AD Connector instead of Simple AD. Refer to https://docs.aws.amazon.com/directoryservice/latest/admin-guide/what_is.html.
Option D is CORRECT: Because Simple AD has the capability to backup with daily automated snapshots.
Option E is incorrect: Because Simple AD is a basic directory service which is not suitable for large service. Also, note that Simple AD supports a maximum of 5000 users. Simple AD is available in two sizes.
Small - Supports up to 500 users (approximately 2,000 objects including users, groups, and computers).
Large - Supports up to 5,000 users (approximately 20,000 objects including users, groups, and computers).
Option F is CORRECT: Because Simple AD provides basic directory service and is cheaper than “AWS Directory Service for Microsoft Active Directory”.