aws ds
Directory Service is a web service that makes it easy for you to setup and run directories in the Amazon Web Services cloud, or connect your Amazon Web Services resources with an existing self-managed Microsoft Active Directory. AWS CLI reference
80 commands Its page in the AWS CLI reference
Commands
accept-shared-directoryAccepts a directory sharing request that was sent from the directory owner account.add-ip-routesIf the DNS server for your self-managed domain uses a publicly addressable IP address, you must add a CIDR address block to correctly route traffic to and from your Microsoft AD on Amazon Web Services.add-regionAdds two domain controllers in the specified Region for the specified directory.add-tags-to-resourceAdds or overwrites one or more tags for the specified directory.cancel-schema-extensionCancels an in-progress schema extension to a Microsoft AD directory.connect-directoryCreates an AD Connector to connect to a self-managed directory.create-aliasCreates an alias for a directory and assigns the alias to the directory.create-computerCreates an Active Directory computer object in the specified directory.create-conditional-forwarderCreates a conditional forwarder associated with your Amazon Web Services directory.create-directoryCreates a Simple AD directory.create-hybrid-adCreates a hybrid directory that connects your self-managed Active Directory (AD) infrastructure and Amazon Web Services.create-log-subscriptionCreates a subscription to forward real-time Directory Service domain controller security logs to the specified Amazon CloudWatch log group in your Amazon Web Services account.create-microsoft-adCreates a Microsoft AD directory in the Amazon Web Services Cloud.create-snapshotCreates a snapshot of a Simple AD or Microsoft AD directory in the Amazon Web Services cloud.create-trustDirectory Service for Microsoft Active Directory allows you to configure trust relationships.delete-ad-assessmentDeletes a directory assessment and all associated data.delete-conditional-forwarderDeletes a conditional forwarder that has been set up for your Amazon Web Services directory.delete-directoryDeletes an Directory Service directory.delete-log-subscriptionDeletes the specified log subscription.delete-snapshotDeletes a directory snapshot.delete-trustDeletes an existing trust relationship between your Managed Microsoft AD directory and an external domain.deregister-certificateDeletes from the system the certificate that was registered for secure LDAP or client certificate authentication.deregister-event-topicRemoves the specified directory as a publisher to the specified Amazon SNS topic.describe-ad-assessmentRetrieves detailed information about a directory assessment, including its current status, validation results, and configuration details.describe-ca-enrollment-policyRetrieves detailed information about the certificate authority (CA) enrollment policy for the specified directory.describe-certificateDisplays information about the certificate registered for secure LDAP or client certificate authentication.describe-client-authentication-settingsRetrieves information about the type of client authentication for the specified directory, if the type is specified.describe-conditional-forwardersObtains information about the conditional forwarders for this account.describe-directoriesObtains information about the directories that belong to this account.describe-directory-data-accessObtains status of directory data access enablement through the Directory Service Data API for the specified directory.describe-domain-controllersProvides information about any domain controllers in your directory.describe-event-topicsObtains information about which Amazon SNS topics receive status messages from the specified directory.describe-hybrid-ad-updateRetrieves information about update activities for a hybrid directory.describe-ldaps-settingsDescribes the status of LDAP security for the specified directory.describe-regionsProvides information about the Regions that are configured for multi-Region replication.describe-settingsRetrieves information about the configurable settings for the specified directory.describe-shared-directoriesReturns the shared directories in your account.describe-snapshotsObtains information about the directory snapshots that belong to this account.describe-trustsObtains information about the trust relationships for this account.describe-update-directoryDescribes the updates of a directory for a particular update type.disable-ca-enrollment-policyDisables the certificate authority (CA) enrollment policy for the specified directory.disable-client-authenticationDisables alternative client authentication methods for the specified directory.disable-directory-data-accessDeactivates access to directory data via the Directory Service Data API for the specified directory.disable-ldapsDeactivates LDAP secure calls for the specified directory.disable-radiusDisables multi-factor authentication (MFA) with the Remote Authentication Dial In User Service (RADIUS) server for an AD Connector or Microsoft AD directory.disable-ssoDisables single-sign on for a directory.enable-ca-enrollment-policyEnables certificate authority (CA) enrollment policy for the specified directory.enable-client-authenticationEnables alternative client authentication methods for the specified directory.enable-directory-data-accessEnables access to directory data via the Directory Service Data API for the specified directory.enable-ldapsActivates the switch for the specific directory to always use LDAP secure calls.enable-radiusEnables multi-factor authentication (MFA) with the Remote Authentication Dial In User Service (RADIUS) server for an AD Connector or Microsoft AD directory.enable-ssoEnables single sign-on for a directory.get-directory-limitsObtains directory limit information for the current Region.get-snapshot-limitsObtains the manual snapshot limits for a directory.list-ad-assessmentsRetrieves a list of directory assessments for the specified directory or all assessments in your account.list-certificatesFor the specified directory, lists all the certificates registered for a secure LDAP or client certificate authentication.list-ip-routesLists the address blocks that you have added to a directory.list-log-subscriptionsLists the active log subscriptions for the Amazon Web Services account.list-schema-extensionsLists all schema extensions applied to a Microsoft AD Directory.list-tags-for-resourceLists all tags on a directory.register-certificateRegisters a certificate for a secure LDAP or client certificate authentication.register-event-topicAssociates a directory with an Amazon SNS topic.reject-shared-directoryRejects a directory sharing request that was sent from the directory owner account.remove-ip-routesRemoves IP address blocks from a directory.remove-regionStops all replication and removes the domain controllers from the specified Region.remove-tags-from-resourceRemoves tags from a directory.reset-user-passwordResets the password for any user in your Managed Microsoft AD or Simple AD directory.restore-from-snapshotRestores a directory using an existing directory snapshot.share-directoryShares a specified directory (DirectoryId) in your Amazon Web Services account (directory owner) with another Amazon Web Services account (directory consumer).start-ad-assessmentInitiates a directory assessment to validate your self-managed AD environment for hybrid domain join.start-schema-extensionApplies a schema extension to a Microsoft AD directory.unshare-directoryStops the directory sharing between the directory owner and consumer accounts.update-conditional-forwarderUpdates a conditional forwarder that has been set up for your Amazon Web Services directory.update-directory-setupUpdates directory configuration for the specified update type.update-hybrid-adUpdates the configuration of an existing hybrid directory.update-number-of-domain-controllersAdds or removes domain controllers to or from the directory.update-radiusUpdates the Remote Authentication Dial In User Service (RADIUS) server information for an AD Connector or Microsoft AD directory.update-settingsUpdates the configurable settings for the specified directory.update-trustUpdates the trust that has been set up between your Managed Microsoft AD directory and an self-managed Active Directory.verify-trustDirectory Service for Microsoft Active Directory allows you to configure and verify trust relationships.