AWS AD-Connector

Description

Deploy a StepFunction to create a Active Directory Connector. The service user password must be passed via encrypted KMS parameters.

Example KMS Encryption

echo 'YOURPASSWORD' | base64 #SingleQuotes

aws kms encrypt --key-id KMSKEYID --plaintext  ENCODEDVALUE --query CiphertextBlob --output text

Architecture

StepFunction Flow

Author's
David Krohn Linkedin - Blog
Marcell Jobs Linkedin

Deployment

Provisioning is done via Taskfile and deployed to the account via a stack.

Prerequisites

• AWS CLI is installed and configured
• awsume is installed
• Taskfile is installed
• AWS CDK is installed

Automated provisioning with a Taskfile

1. Adjust values in exmaple.json or create a new one
2. Open Shell
3. Run: awsume DEPLOYMENTACCOUNT
4. Run: task deploy