Your company owns an on-premises Microsoft Active Directory. There is a plan to migrate some legacy applications to AWS, and various AWS services will be used shortly. Your company decides to use AD Connector to allow the users to access the AWS Management Console and manage AWS resources by logging in with their existing Active Directory credentials. Which of the following is NOT a benefit of AD Connector?

Answer options:

A.It provides an easy way to connect AWS compatible applications to the existing on-premises Microsoft Active Directory.
B.It eliminates the need for directory synchronization or the complexity of hosting a federation infrastructure in AWS.
C.AD Connector is compatible with almost all AWS services, including EC2, Lambda and RDS SQL.
D.Users can continue to manage the existing Active Directory as before.

Correct Answer: C
Option A is incorrect because this is an advantage of AD Connector. Existing on-premises Microsoft Active Directory can still be used for AWS resources.
Option B is incorrect because AD Connector provides an easy way to utilize the existing directory service so that users do not need to configure a new one.
Option C is CORRECT because the compatible AWS applications and services are limited. Details can be found in https://docs.aws.amazon.com/directoryservice/latest/admin-guide/ad_connector_app_compatibility.html. Lambda and RDS SQL are not compatible.
Option D is incorrect because users can still manage the on-premises Active Directory as before, such as by adding new users and groups and updating passwords.
References:
https://docs.aws.amazon.com/directoryservice/latest/admin-guide/what_is.html 
https://docs.aws.amazon.com/directoryservice/latest/admin-guide/ad_connector_app_compatibility.html