Providing self-service multi-account access to AWS Managed Microsoft AD

This article explains how to provide self-service multi-account access to an AWS Managed Microsoft Active Directory (AWS Managed Microsoft AD) directory across a multi-account AWS Organizations environment using AWS Service Catalog.

Specifically, the article covers:

• Solution overview: Leveraging AWS Service Catalog, AWS CloudFormation, Amazon Route 53 Resolver, and AWS Managed Microsoft AD to enable self-service sharing of the directory across accounts
• Prerequisites: AWS Organizations, AWS accounts, networking configuration, and authentication setup needed
• Walkthrough: Detailed steps to configure AWS Organizations, create an AWS Managed Microsoft AD instance, set up Amazon Route 53 Resolver forwarding rules, and deploy the Service Catalog product
• Conclusion: Benefits of the self-service solution for sharing AWS Managed Microsoft AD across a multi-account environment