Simplify and Streamline Identity Security and Management to Protect your Business

AWS Managed Microsoft AD with Active Roles helps you protect and simplify your Active Directory domains and Entra ID tenants from a single pane of glass. With AWS Managed Microsoft AD with Active Roles your identities, objects, and computers can only access what they should, correcting privilege sprawl and reducing or eliminating standing privileges. This dramatically reduces your AD attack surface, protecting you from threat actors.

This combined solution enables you to:

• Streamline AD and Entra ID security and management while increasing visibility and control by consolidating all AD domains and Entra ID tenants onto a single console without having to create trusts, and through automation of AD-related tasks and policies.
• Simplify your AD environment and ease your migration to the cloud by synchronizing identities from one system to another to dramatically reduce the number of identities to manage.
• Reduce your attack surface to protect your business by reducing standing privilege and consolidating, or reducing, the number of identities to manage, thereby reducing your risk of cyberattack.

Simplify your directory strategy with AWS Managed AD and Active Roles

Active Roles is the trusted name in AD security and management, offering granular delegation, workflow automation and synchronization of AD and Entra ID. In addition, Active Roles provides automated provisioning, dynamic delegation outside of domain and OU structure, and critical functions such as workflow/change approval and auditing. All of these capabilities are provided across all domains and tenants through a consolidated, user-friendly interface.

Streamline migration to the cloud

AWS Directory Service and Active Roles work together to enable streamlined migration to the cloud while enhancing the security of both the AWS Directory Service and on-premises AD. While AWS provides the secure directory, Active Roles provides:

• Directory synchronization: Sync on-premises AD to AWS Directory Service. This means user and group data, including password changes, can be easily synchronized to AWS Directory exactly as they are in the on-premises AD
• Delegation to all levels: From the top-tier AD admins to the front-line business users, Active Roles allows admins to perform the tasks they need without over-permissioning
• AD Object Management: Automate the lifecycle management of AWS Managed AD objects. Access those objects with an MMC Console and a customizable web interface