Amazon Directory Service website screenshot

Amazon Directory Service

AWS Directory Service for Microsoft Active Directory, also known as AWS Managed Microsoft AD, enables your directory-aware workloads and AWS resources to use managed Active Directory in AWS. It provides a fully managed, highly available Microsoft Active Directory in the AWS Cloud, with features including trust relationships, domain controllers, LDAPS, and multi-account sharing.

Amazon Directory Service publishes 5 API contracts indexed on the APIs.io network, including AWS Directory Service API, Directory Service Ad Assessment API, Directory Service Ca Enrollment Policy API, and 2 more. Tagged areas include Active Directory, Authentication, Amazon Web Services, Directory Services, and Identity and Access Management.

The Amazon Directory Service catalog on APIs.io includes 1 JSON-LD context and 2 Spectral governance rulesets.

Amazon Directory Service’s developer surface includes pricing, authentication, developer portal, documentation, support, engineering blog, developer console, and 19 more developer resources.

53.4/100 developing ▬ flat Agent 27/100 agent aware saas Full breakdown ↓
scored 2026-11-06 · rubric v0.27.0 · Show this score on your site →
1 published contract 6 Features 5 Use Cases
Active DirectoryAuthenticationAmazon Web ServicesDirectory ServicesIdentity and Access Management

What this lets a business do 1

Business capabilities this provider's published APIs can perform, derived from its own contracts. Browse all capabilities →

Cybersecurity Management
BC-620
#X Amz Target=DirectoryService 20150416.AcceptSharedDirectory#X Amz Target=DirectoryService 20150416.ConnectDirectory#X Amz Target=DirectoryService 20150416.CreateComputer#X Amz Target=DirectoryService 20150416.CreateDirectory#X Amz Target=DirectoryService 20150416.CreateMicrosoftAD#X Amz Target=DirectoryService 20150416.CreateTrust

Kin Score

Kin Score Kin Score How this is scored →
scored 2026-11-06 · rubric v0.27.0
Regulatory Posture applies to this provider. Its tags matched the Horizontal (data, software, accessibility, platform) regime, so Regulatory Posture carries 15 points of the composite. If this regime is wrong for your business, say so on your provider repo — the applicability map is public and we will correct it.
Create-or-Update Ergonomics applies to this provider. This API accepts writes, so it carries 10 points of the composite. It is scored from the published contracts themselves: whether a caller can create-or-update in one call, whether the write accepts a key the caller already holds, and whether the response says which branch ran. Without that, every write needs a search-and-branch in front of it, and the first time that check is skipped a duplicate record is created. Scored against the observed mean rather than raw — a provider at the catalog average is unchanged by this facet, not penalised by it.
The six quality facets above are damped to 75 points between them, because the conditional facet above carries the other 25. That is why each facet's contribution is shown against a damped maximum: raising a quality facet moves the composite by 75% of its nominal weight, not 100%. The full arithmetic is at apis.io/rating/.
Show this score on your site. Kin Score badge preview for Amazon Directory Service It updates itself when the score changes. Paste this where you link to your API docs:
<a href="https://apis.io/providers/amazon-directory-service/"><img src="https://apis.io/badge/amazon-directory-service/card.svg" alt="Amazon Directory Service on APIs.io — Kin Score by API Evangelist"></a>
Other styles, a README pill and a shields.io endpoint are on the badge page.
Raise your score.
Agent readiness — checks not met, largest first (exact, from this profile):
  • MCP Server +12 pts — deployment.mode + probe verdict on the mcp/ manifest, not the pointer; an unprobed slug falls back to authorship
  • Idempotency +9 pts — OpenAPI mutating operations declare an idempotency key — a header, a request-body property, or a named de-duplication token whose own description says so (verified); else common[].type matches /idempoten/i (documented)
  • A2A Agent Card +8 pts — a2a/-a2a.yml manifest, graded on conformance.grade against A2A 1.0.0
  • Registration Without a Human +6 pts — a `registration_endpoint` in the served RFC 8414 / OIDC discovery document
  • Delegated User Identity +6 pts — a served discovery document listing authorization_code in grant_types_supported (served), else an oauth2 authorizationCode flow or openIdConnect declared in an OpenAPI (documented)
  • Typed Event Surface +6 pts — AsyncAPI document, OR webhooks/callbacks objects in the as-published OpenAPI, OR common[].type includes Webhooks
7 more unmet checks in the Agent Readiness table above.
Kin Score — facets with the most composite points still available (weight × headroom):
Each check links to what satisfies it. Publish the artifact, or tell us where it already lives, and the score moves on the next scoring run.
Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. Every facet and dimension name above is a link: it opens that measurement's own page — what it means, the exact checks that feed it, how the whole catalog distributes on it, and the providers at the top of it. This rating is computed from the provider profile at artifacts.apis.io/amazon-directory-service/apis.yml: open an issue on github.com/api-evangelist/amazon-directory-service to ask a question or point us at an artifact you publish. Submit an artifact on GitHub — free → Manage your own listing — the Influence plan, $499/mo →

Standards implemented 2

Standards this provider implements or carries. De facto ones are profiled and measured by the API Commons; formal ones come from the standards directory and are linked by the provider's own tags. The evidence column says how each claim was established — not that it was made.

IAM
tagged — the provider's own APIs.json carries the standard as a tag; implementation not verified
measured — observed by APIs.io (published)

APIs 5

Individual APIs this provider publishes, each with its own machine-readable definition.

Amazon Directory Service AWS Directory Service API

The AWS Directory Service API from Amazon Directory Service — 67 operation(s) for aws directory service.

Amazon Directory Service Directory Service Ad Assessment API

The Directory Service Ad Assessment API from Amazon Directory Service — 4 operation(s) for directory service ad assessment.

Amazon Directory Service Directory Service Ca Enrollment Policy API

The Directory Service Ca Enrollment Policy API from Amazon Directory Service — 3 operation(s) for directory service ca enrollment policy.

Amazon Directory Service Directory Service Directory Data Access API

The Directory Service Directory Data Access API from Amazon Directory Service — 3 operation(s) for directory service directory data access.

Amazon Directory Service Directory Service Operations API

The Directory Service Operations API from Amazon Directory Service — 3 operation(s) for directory service operations.

Postman Collections 67

Ready-to-run Postman collections for exercising this provider's APIs.

Scroll for all 67

Open Collections 67

Open, tool-agnostic API collections (OpenAPI-derived and Bruno).

Scroll for all 67

Amazon Directory Service API pricing

Rate limits

Compiled by API Evangelist, not yet checked against Amazon Directory Service's documentation. All 5 limits →

Pricing Plans 1

Published pricing tiers and plan structures.

Rate Limits 1

Documented rate limits and quota policies.

FinOps 1

Cost, billing, and metering signals for API financial operations.

Features 6

Notable capabilities this provider offers.

Managed Microsoft AD

Fully managed AWS Managed Microsoft Active Directory with automatic patching and monitoring

Simple AD

Standalone managed directory powered by Samba 4 for basic AD functionality

AD Connector

Proxy service for connecting AWS applications to existing on-premises AD

Trust Relationships

One-way and two-way trust relationships between AWS and on-premises directories

Multi-Region Replication

Replicate your AWS Managed Microsoft AD across multiple AWS Regions

Directory Sharing

Share a single directory across multiple AWS accounts and VPCs

Semantic Vocabularies 1

JSON-LD contexts and semantic vocabularies used across these APIs.

Amazon Directory Service Context

26 classes · 101 properties

JSON-LD

Spectral Rules 2

Spectral governance rulesets for linting and validating these APIs.

Amazon Directory Service — jsonschema rules

5 rules · 4 warnings 1 info

SPECTRAL

Amazon Directory Service API Rules

22 rules · 11 errors 8 warnings 3 info

SPECTRAL

JSON Schema 26

Standalone JSON Schema definitions for this provider's data models.

Certificate

8 properties

JSON SCHEMA

ClientCertAuthSettings

1 properties

JSON SCHEMA

Computer

3 properties

JSON SCHEMA

ConditionalForwarder

3 properties

JSON SCHEMA

DirectoryConfigurationStatus

0 properties

JSON SCHEMA

DirectoryConnectSettingsDescription

6 properties

JSON SCHEMA

DirectoryConnectSettings

4 properties

JSON SCHEMA

DirectoryDescription

26 properties

JSON SCHEMA

DirectoryLimits

9 properties

JSON SCHEMA

DirectoryVpcSettingsDescription

4 properties

JSON SCHEMA

DirectoryVpcSettings

2 properties

JSON SCHEMA

EventTopic

5 properties

JSON SCHEMA

IpRouteInfo

6 properties

JSON SCHEMA

IpRoute

2 properties

JSON SCHEMA

LDAPSSettingInfo

3 properties

JSON SCHEMA

LogSubscription

3 properties

JSON SCHEMA

OSUpdateSettings

1 properties

JSON SCHEMA

OwnerDirectoryDescription

6 properties

JSON SCHEMA

RadiusSettings

8 properties

JSON SCHEMA

RegionDescription

9 properties

JSON SCHEMA

SchemaExtensionInfo

7 properties

JSON SCHEMA

SharedDirectory

9 properties

JSON SCHEMA

SnapshotLimits

3 properties

JSON SCHEMA

Snapshot

6 properties

JSON SCHEMA

Tag

2 properties

JSON SCHEMA

Trust

11 properties

JSON SCHEMA

Scroll for all 26

JSON Structure 26

JSON Structure definitions describing this provider's data shapes.

Amazon Directory Service Tag Structure

2 properties

JSON STRUCTURE

Amazon Directory Service Trust Structure

11 properties

JSON STRUCTURE

Scroll for all 26

Examples 25

Example request and response payloads for these APIs.

Scroll for all 25

Security Posture 4

Authentication, domain security, vulnerability disclosure, and trust-center signals.

Amazon Directory Service Authentication

apiKey · 1 scheme

SECURITY

Amazon Directory Service Domain Security

TLSv1.3 · HSTS · DMARC

SECURITY

Amazon Directory Service Vulnerability Disclosure

security.txt · contact published

SECURITY

Amazon Directory Service Trust Center

PCI DSS, HIPAA, FedRAMP, GDPR, FIPS 140

SECURITY

Agentic Access 1

Recommended x-agentic-access execution contracts for AI agents.

Amazon Directory Service Agentic Access

67 operations · 60 acting · 7 human-in-the-loop

67 operations · 60 acting

AGENTIC

Use Cases 5

What developers build with this provider.

Hybrid Identity

Extend on-premises Active Directory into AWS for unified identity management

Workload Authentication

Enable Windows and Linux workloads to join and authenticate against managed AD

AWS Application Integration

Use managed AD for AWS WorkSpaces, RDS, and other AD-aware services

LDAPS Encryption

Secure LDAP communications with certificates for compliance requirements

Disaster Recovery

Use directory snapshots for point-in-time recovery of directory data

Resources

Get Started 4

Portal, sign-up, and the first successful call

Documentation 1

Reference material describing how the API behaves

Agent Surfaces 1

MCP servers, agent skills, and machine-readable catalogs

Design & Contract 2

Pagination, idempotency, versioning, errors, and events

Build 2

SDKs, sample code, and the tooling you integrate with

Access & Security 4

Authentication, authorization, and security posture

Operate 4

Status, limits, changes, and where to get help

Commercial 5

Pricing, plans, and the legal terms of use

Company 2

The organization behind the API

Other 1

Properties that don't map to a standard resource type

Source (apis.yml)

apis.yml Raw ↑
aid: amazon-directory-service
name: Amazon Directory Service
description: AWS Directory Service for Microsoft Active Directory, also known as AWS Managed Microsoft AD, enables your directory-aware
  workloads and AWS resources to use managed Active Directory in AWS. It provides a fully managed, highly available Microsoft
  Active Directory in the AWS Cloud, with features including trust relationships, domain controllers, LDAPS, and multi-account
  sharing.
type: Index
kind: company
deliveryModel:
  model: saas
  open_source: false
  commercial: true
  callable_host: true
  label: Hosted service · you call their endpoint
  confidence: high
  source:
  - openapi
  - pricing
  generated: '2026-08-28'
  method: derived
accessModel:
  pricing: unknown
  onboarding: unknown
  trial: false
  try_now: false
  public: false
  label: Unknown
  confidence: low
  source:
  - authentication
  - security
  generated: '2026-11-06'
  method: derived
image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/icons/amazon-directory-service.png
tags:
- Active Directory
- Authentication
- Amazon Web Services
- Directory Services
- Identity and Access Management
tags_raw:
- Active Directory
- Authentication
- AWS
- Directory Services
- Identity Management
url: https://raw.githubusercontent.com/api-evangelist/amazon-directory-service/refs/heads/main/apis.yml
created: '2026-03-16'
modified: '2026-05-19'
specificationVersion: '0.23'
apis:
- aid: amazon-directory-service:amazon-directory-service-aws-directory-service-api
  name: Amazon Directory Service AWS Directory Service API
  description: The AWS Directory Service API from Amazon Directory Service — 67 operation(s) for aws directory service.
  humanURL: https://aws.amazon.com/directoryservice/
  baseURL: https://ds.amazonaws.com
  tags:
  - AWS Directory Service
  properties:
  - type: OpenAPI
    url: openapi/amazon-directory-service-aws-directory-service-api-openapi.yml
  - type: Documentation
    url: https://docs.aws.amazon.com/directoryservice/latest/devguide/what_is.html
  - type: GettingStarted
    url: https://aws.amazon.com/directoryservice/getting-started/
- aid: amazon-directory-service:amazon-directory-service-ad-assessment-api
  name: Amazon Directory Service Directory Service Ad Assessment API
  description: The Directory Service Ad Assessment API from Amazon Directory Service — 4 operation(s) for directory service
    ad assessment.
  humanURL: https://aws.amazon.com/directoryservice/
  baseURL: https://ds.amazonaws.com
  tags:
  - Directory Service Ad Assessment
  properties:
  - type: OpenAPI
    url: openapi/amazon-directory-service-ad-assessment-api-openapi.yml
- aid: amazon-directory-service:amazon-directory-service-ca-enrollment-policy-api
  name: Amazon Directory Service Directory Service Ca Enrollment Policy API
  description: The Directory Service Ca Enrollment Policy API from Amazon Directory Service — 3 operation(s) for directory
    service ca enrollment policy.
  humanURL: https://aws.amazon.com/directoryservice/
  baseURL: https://ds.amazonaws.com
  tags:
  - Directory Service Ca Enrollment Policy
  properties:
  - type: OpenAPI
    url: openapi/amazon-directory-service-ca-enrollment-policy-api-openapi.yml
- aid: amazon-directory-service:amazon-directory-service-directory-data-access-api
  name: Amazon Directory Service Directory Service Directory Data Access API
  description: The Directory Service Directory Data Access API from Amazon Directory Service — 3 operation(s) for directory
    service directory data access.
  humanURL: https://aws.amazon.com/directoryservice/
  baseURL: https://ds.amazonaws.com
  tags:
  - Directory Service Directory Data Access
  properties:
  - type: OpenAPI
    url: openapi/amazon-directory-service-directory-data-access-api-openapi.yml
- aid: amazon-directory-service:amazon-directory-service-operations-api
  name: Amazon Directory Service Directory Service Operations API
  description: The Directory Service Operations API from Amazon Directory Service — 3 operation(s) for directory service operations.
  humanURL: https://aws.amazon.com/directoryservice/
  baseURL: https://ds.amazonaws.com
  tags:
  - Directory Service Operations
  properties:
  - type: OpenAPI
    url: openapi/amazon-directory-service-operations-api-openapi.yml
common:
- type: RateLimits
  url: rate-limits/amazon-directory-service-rate-limits.yml
- type: FinOps
  url: finops/amazon-directory-service-finops.yml
- type: Pricing
  url: https://aws.amazon.com/pricing/?nc2=h_pr_hub
- type: Plans
  url: plans/amazon-directory-service-plans-pricing.yml
- type: CapabilityMap
  url: capabilities/amazon-directory-service-capability-edges.yml
  name: Amazon Directory Service Business Capability Map
- type: PostmanWorkspace
  url: https://www.postman.com/kinlaneapi/amazon-directory-service/overview
- type: AgenticAccess
  url: agentic-access/amazon-directory-service-agentic-access.yml
- type: TrustCenter
  url: security/amazon-directory-service-trust-center.yml
- type: VulnerabilityDisclosure
  url: security/amazon-directory-service-vulnerability-disclosure.yml
- type: DomainSecurity
  url: security/amazon-directory-service-domain-security.yml
- type: Authentication
  url: authentication/amazon-directory-service-authentication.yml
- type: Portal
  url: https://aws.amazon.com/directoryservice/
- type: Website
  url: https://aws.amazon.com/directoryservice/
- type: Documentation
  url: https://docs.aws.amazon.com/directoryservice/
- type: TermsOfService
  url: https://aws.amazon.com/service-terms/
- type: PrivacyPolicy
  url: https://aws.amazon.com/privacy/
- type: Support
  url: https://aws.amazon.com/premiumsupport/
- type: Blog
  url: https://aws.amazon.com/blogs/security/tag/aws-directory-service/
- type: GitHubOrganization
  url: https://github.com/aws
- type: Console
  url: https://console.aws.amazon.com/directoryservicev2/
- type: Signup
  url: https://portal.aws.amazon.com/billing/signup
- type: Login
  url: https://signin.aws.amazon.com/
- type: StatusPage
  url: https://health.aws.amazon.com/health/status
- type: Contact
  url: https://aws.amazon.com/contact-us/
- type: SpectralRules
  url: https://raw.githubusercontent.com/api-evangelist/amazon-directory-service/refs/heads/main/rules/amazon-directory-service-spectral-rules.yml
- type: Vocabulary
  url: https://raw.githubusercontent.com/api-evangelist/amazon-directory-service/refs/heads/main/vocabulary/amazon-directory-service-vocabulary.yaml
- type: Features
  data:
  - name: Managed Microsoft AD
    description: Fully managed AWS Managed Microsoft Active Directory with automatic patching and monitoring
  - name: Simple AD
    description: Standalone managed directory powered by Samba 4 for basic AD functionality
  - name: AD Connector
    description: Proxy service for connecting AWS applications to existing on-premises AD
  - name: Trust Relationships
    description: One-way and two-way trust relationships between AWS and on-premises directories
  - name: Multi-Region Replication
    description: Replicate your AWS Managed Microsoft AD across multiple AWS Regions
  - name: Directory Sharing
    description: Share a single directory across multiple AWS accounts and VPCs
- type: UseCases
  data:
  - name: Hybrid Identity
    description: Extend on-premises Active Directory into AWS for unified identity management
  - name: Workload Authentication
    description: Enable Windows and Linux workloads to join and authenticate against managed AD
  - name: AWS Application Integration
    description: Use managed AD for AWS WorkSpaces, RDS, and other AD-aware services
  - name: LDAPS Encryption
    description: Secure LDAP communications with certificates for compliance requirements
  - name: Disaster Recovery
    description: Use directory snapshots for point-in-time recovery of directory data
- type: Integrations
  data:
  - name: Amazon WorkSpaces
    description: Join WorkSpaces desktops to managed AD for enterprise desktop management
  - name: Amazon RDS
    description: Enable Windows Authentication for SQL Server RDS instances via managed AD
  - name: AWS IAM Identity Center
    description: Use managed AD as identity source for centralized access management
  - name: AWS CloudTrail
    description: Audit all Directory Service API calls for compliance and security monitoring
  - name: Amazon SNS
    description: Receive directory event notifications via SNS topic subscriptions
- type: Integrations
  url: https://aws.amazon.com/marketplace
integrations:
- name: Agent Mode
- name: Sign in
- name: Become a Channel Partner
- name: Resources
- name: Sell in AWS Marketplace
- name: Why AWS Marketplace?
- name: Get started in AWS Marketplace
- name: Manage Your Account
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com
x-parent: amazon-web-services
x-relationship: product

Amazon Directory Service API — frequently asked questions

Does Amazon Directory Service have an API?

Yes. APIs.io lists 5 APIs from Amazon Directory Service, including Amazon Directory Service AWS Directory Service API, Amazon Directory Service Directory Service Ad Assessment API and Amazon Directory Service Directory Service Ca Enrollment Policy API, and 2 more.

Is there an OpenAPI specification for the Amazon Directory Service API?

Yes. APIs.io indexes 5 OpenAPI specifications for Amazon Directory Service, each linked for download from this page.

How do I authenticate with the Amazon Directory Service API?

Amazon Directory Service uses bearer-token authentication (apiKey · 1 scheme). The details are profiled on APIs.io as Amazon Directory Service Authentication.

Is the Amazon Directory Service API ready for AI agents?

Amazon Directory Service has a Kin Score of 53.4 out of 100 (developing) and an Agent Readiness score of 27.3 (agent-aware), scored by API Evangelist on 2026-11-06.

Work with this as data

Every provider here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for providers

9 MCP tools reach this
  • find_providersBrowse and filter every provider in the catalog.
  • get_provider_artifactsEvery artifact this provider publishes, grouped by type.
  • get_provider_operationsEvery operation across all of their OpenAPIs — one call instead of parsing every spec.
  • get_provider_toolsEvery MCP tool they ship, with the operation each wraps.
  • get_provider_evidenceHow each part of their score was established. Free — the basis for a claim should not sit behind it.
  • get_provider_ratingPRO — composite, band, trend and facet scores.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This provider
curl "https://apis.io/api/v1/providers/amazon-directory-service"
All providers
curl "https://apis.io/api/v1/providers?limit=25"
Every operation they expose
curl "https://apis.io/api/v1/providers/amazon-directory-service/operations?limit=25"
How their score was established
curl "https://apis.io/api/v1/providers/amazon-directory-service/evidence"

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

A second provider on the same verified email joins the account you already have.