Microsoft Azure → Amazon Web Services
AWS equivalent of Microsoft Entra Domain Services
The closest AWS equivalent of Microsoft Entra Domain Services is AWS Directory Service.
About Microsoft Entra Domain Services
| Provider | Microsoft Azure |
|---|---|
| Status | Generally available |
| What it is | Managed domain (domain join, Group Policy, LDAP, Kerberos and NTLM) synced from Entra ID, without deploying domain controllers. |
| Documentation | learn.microsoft.com |
| Pricing | Official pricing page |
AWS mappings (1)
| Capability | AWS equivalent | Match |
|---|---|---|
| Managed Active Directory | AWS Directory Service | Partial match |
Customer identity, directories & app access(1)
Managed Active Directory Partial match
AWS Directory Service maps to Microsoft Entra Domain Services. Both provide managed domain join, Group Policy, LDAP, and Kerberos or NTLM authentication.
- Source of identities. AWS Managed Microsoft AD is a real AD forest you administer (with delegated admin rights), and it can create trusts with on-premises AD. Entra Domain Services is a standalone managed domain whose users sync one way from Entra ID, with limited admin rights. You can configure forest trusts with on-premises AD DS for hybrid access.
- Proxy. AD Connector proxies requests to your existing AD with no cloud directory. On Azure, the equivalent pattern is to run your own domain controllers on Azure VMs, or use Entra Connect to sync identities.