AWS directoryservice documentation change
Summary
Updated references from 'AWS Directory Service' to 'Directory Service' for terminology consistency. No technical changes to security practices or configurations.
Security assessment
Changes are purely editorial, removing redundant 'AWS' branding from service name references. No modifications to security recommendations (e.g., password policies, SNS monitoring, or OU management warnings remain unchanged).
Diff
diff --git a/directoryservice/latest/admin-guide/ms_ad_best_practices.md b/directoryservice/latest/admin-guide/ms_ad_best_practices.md index 16bb6b58f..a2c377cf7 100644 --- a//directoryservice/latest/admin-guide/ms_ad_best_practices.md +++ b//directoryservice/latest/admin-guide/ms_ad_best_practices.md @@ -41 +41 @@ Consider these guidelines before creating your directory. -AWS Directory Service provides multiple ways to use Microsoft Active Directory with other AWS services. You can choose the directory service with the features you need at a cost that fits your budget: +Directory Service provides multiple ways to use Microsoft Active Directory with other AWS services. You can choose the directory service with the features you need at a cost that fits your budget: @@ -52 +52 @@ AWS Directory Service provides multiple ways to use Microsoft Active Directory w -For a more detailed comparison of AWS Directory Service options, see [Which to choose](./what_is.html#choosing_an_option). +For a more detailed comparison of Directory Service options, see [Which to choose](./what_is.html#choosing_an_option). @@ -101 +101 @@ When you set up your directory, you provide a password for the administrator acc -We recommend that you create a DHCP options set for your AWS Directory Service directory and assign the DHCP options set to the VPC that your directory is in. That way any instances in that VPC can point to the specified domain, and DNS servers can resolve their domain names. +We recommend that you create a DHCP options set for your Directory Service directory and assign the DHCP options set to the VPC that your directory is in. That way any instances in that VPC can point to the specified domain, and DNS servers can resolve their domain names. @@ -119 +119 @@ For more information, see Use the Windows DC locator service. -AWS Directory Service provides support for most character formats that can be used in the construction of usernames. However, there are character restrictions that are enforced on usernames that will be used for signing in to AWS applications, such as WorkSpaces, WorkDocs, Amazon WorkMail, or Quick Suite. These restrictions require that the following characters not be used: +Directory Service provides support for most character formats that can be used in the construction of usernames. However, there are character restrictions that are enforced on usernames that will be used for signing in to AWS applications, such as WorkSpaces, WorkDocs, Amazon WorkMail, or Quick Suite. These restrictions require that the following characters not be used: @@ -167 +167 @@ Here are some suggestions to keep in mind when using your AWS Managed Microsoft -When you use AWS Directory Service to launch a directory, AWS creates an organizational unit (OU) that contains all your directory's objects. This OU, which has the NetBIOS name that you typed when you created your directory, is located in the domain root. The domain root is owned and managed by AWS. Several groups and an administrative user are also created. +When you use Directory Service to launch a directory, AWS creates an organizational unit (OU) that contains all your directory's objects. This OU, which has the NetBIOS name that you typed when you created your directory, is located in the domain root. The domain root is owned and managed by AWS. Several groups and an administrative user are also created. @@ -173 +173 @@ Do not move, delete or in any other way alter these predefined objects. Doing so -When launching a Windows instance that is to be part of an AWS Directory Service domain, it is often easiest to join the domain as part of the instance creation process rather than manually adding the instance later. To automatically join a domain, simply select the correct directory for **Domain join directory** when launching a new instance. You can find details in [Joining an Amazon EC2 Windows instance to your AWS Managed Microsoft AD Active Directory](./launching_instance.html). +When launching a Windows instance that is to be part of an Directory Service domain, it is often easiest to join the domain as part of the instance creation process rather than manually adding the instance later. To automatically join a domain, simply select the correct directory for **Domain join directory** when launching a new instance. You can find details in [Joining an Amazon EC2 Windows instance to your AWS Managed Microsoft AD Active Directory](./launching_instance.html). @@ -206 +206 @@ Do not use a load balancer in front of the AWS Managed Microsoft AD end-points. -If you decide to manually add an instance to an existing AWS Directory Service domain, make a backup or take a snapshot of that instance first. This is particularly important when joining a Linux instance. Some of the procedures used to add an instance, if not performed correctly, can render your instance unreachable or unusable. For more information, see [Restoring your AWS Managed Microsoft AD with snapshots](./ms_ad_snapshots.html). +If you decide to manually add an instance to an existing Directory Service domain, make a backup or take a snapshot of that instance first. This is particularly important when joining a Linux instance. Some of the procedures used to add an instance, if not performed correctly, can render your instance unreachable or unusable. For more information, see [Restoring your AWS Managed Microsoft AD with snapshots](./ms_ad_snapshots.html). @@ -212 +212 @@ With Amazon Simple Notification Service (Amazon SNS), you can receive email or t -Also remember that if you have an SNS topic that receives messages from AWS Directory Service, before deleting that topic from the Amazon SNS console, you should associate your directory with a different SNS topic. Otherwise you risk missing important directory status messages. For information about how to set up Amazon SNS, see [Enabling AWS Managed Microsoft AD directory status notifications with Amazon Simple Notification Service](./ms_ad_enable_notifications.html). +Also remember that if you have an SNS topic that receives messages from Directory Service, before deleting that topic from the Amazon SNS console, you should associate your directory with a different SNS topic. Otherwise you risk missing important directory status messages. For information about how to set up Amazon SNS, see [Enabling AWS Managed Microsoft AD directory status notifications with Amazon Simple Notification Service](./ms_ad_enable_notifications.html). @@ -216 +216 @@ Also remember that if you have an SNS topic that receives messages from AWS Dire -AWS Managed Microsoft AD allows you to tailor your security configuration to meet your compliance and security requirements. AWS Managed Microsoft AD deploys and maintains the configuration to all domain controllers in your directory, including when adding new regions or additional domain controllers. You can configure and apply these security settings for all your new and existing directories. You can do this in the console by following the steps in [Edit directory security settings](./ms_ad_directory_settings.html#edit-ds-settings) or through the [UpdateSettings API](https://docs.aws.amazon.com/directoryservice/latest/devguide/API_UpdateSettings.html). +AWS Managed Microsoft AD allows you to tailor your security configuration to meet your compliance and security requirements. AWS Managed Microsoft AD deploys and maintains the configuration to all domain controllers in your directory, including when adding new regions or additional domain controllers. You can configure and apply these security settings for all your new and existing directories. You can do this in the console by following the steps in [Edit directory security settings](./ms_ad_directory_settings.html#edit-ds-settings) or through the [UpdateSettings API](https://docs.aws.amazon.com//directoryservice/latest/devguide/API_UpdateSettings.html).