Amazon Directory Service · Capability

Amazon Directory Service Active Directory Management

Workflow capability for identity engineers and cloud architects to manage AWS Managed Microsoft Active Directory, including directory provisioning, trust relationships, domain controllers, snapshots, IP routing, and certificate management for hybrid identity workloads.

Run with Naftiko Amazon Directory ServiceActive DirectoryIdentity ManagementHybrid CloudAWS

What You Can Do

GET
Describe directories — List all managed directories
/v1/directories
POST
Create microsoft ad — Create an AWS Managed Microsoft AD directory
/v1/directories
GET
Describe trusts — List trust relationships
/v1/trusts
POST
Create trust — Create a trust relationship
/v1/trusts
GET
Describe snapshots — List directory snapshots
/v1/snapshots
POST
Create snapshot — Create a manual directory snapshot
/v1/snapshots
GET
List certificates — List registered certificates
/v1/certificates
GET
Describe shared directories — List shared directories
/v1/shared-directories

MCP Tools

describe-directories

List all AWS Managed Microsoft AD and Simple AD directories in the account

read-only
create-microsoft-ad

Create an AWS Managed Microsoft Active Directory in the AWS Cloud

create-directory

Create a Simple AD directory powered by Samba 4

delete-directory

Delete an AWS Directory Service directory

idempotent
describe-trusts

List trust relationships established for AWS Managed Microsoft AD directories

read-only
create-trust

Create a trust relationship between AWS Managed Microsoft AD and an on-premises directory

describe-snapshots

List manual snapshots of a directory for backup and restore purposes

read-only
create-snapshot

Create a manual snapshot of a directory for backup

restore-from-snapshot

Restore a directory to a previous state using a snapshot

describe-domain-controllers

List domain controllers provisioned for an AWS Managed Microsoft AD directory

read-only
list-certificates

List certificates registered for LDAPS or client certificate authentication

read-only
share-directory

Share a directory with another AWS account for multi-account access

describe-shared-directories

List directories shared from your account or shared with your account

read-only
get-directory-limits

Get the directory service limits for the current AWS account and region

read-only

APIs Used

directory-service