Secure your AWS Managed Microsoft AD
You can use password policies, features like multi-factor authentication (MFA), and settings to secure your AWS Managed Microsoft AD. Ways you can secure your directory include:
-
Understand how the password policies in Active Directory works so they can be applied to AWS Managed Microsoft AD users. You can also delegate which user can manage your AWS Managed Microsoft AD password policies.
-
Enable MFA which increases your AWS Managed Microsoft AD security.
-
>Enable Lightweight Directory Access Protocol over Secure Socket Layer (SSL)/Transport Layer Security (TLS) (LDAPS) so that communications over LDAP are encrypted and improves security.
-
Manage your AWS Managed Microsoft AD compliance with standards like Federal Risk and Authorization Management Program (FedRAMP) and Payment Card Industry (PCI) Data Security Standard (DSS).
-
Enhance your AWS Managed Microsoft AD network security configuration> by modifying AWS Security Group to meet your environment needs.
-
Edit your AWS Managed Microsoft AD directory security settings like Certificate Base Authentication, Secure Channel Cipher and Protocol to meet your needs.
-
Set up AWS Private Certificate Authority Connector for AD so you can issue and manage certificates for your AWS Managed Microsoft AD with AWS Private CA.