AWS Security ChangesHomeSearch

AWS directoryservice documentation change

Service: directoryservice · 2026-04-19 · Documentation low

File: directoryservice/latest/admin-guide/ms_ad_getting_started.md

Summary

Updated the functional level of AWS Managed Microsoft AD from 2012 R2 to 2016 Forest and Domain functional levels.

Security assessment

The change updates the version information for the managed Active Directory service. While newer functional levels may include security improvements, the change itself does not reference any specific security issue, vulnerability, or incident. It appears to be a routine documentation update to reflect current service capabilities.

Diff

diff --git a/directoryservice/latest/admin-guide/ms_ad_getting_started.md b/directoryservice/latest/admin-guide/ms_ad_getting_started.md
index 86f99b392..7475e220d 100644
--- a//directoryservice/latest/admin-guide/ms_ad_getting_started.md
+++ b//directoryservice/latest/admin-guide/ms_ad_getting_started.md
@@ -11 +11 @@ AWS Managed Microsoft AD prerequisitesAWS IAM Identity Center prerequisitesMulti
-AWS Managed Microsoft AD creates a fully managed, Microsoft Active Directory in the AWS Cloud and is powered by Windows Server 2019 and operates at the 2012 R2 Forest and Domain functional levels. When you create a directory with AWS Managed Microsoft AD, Directory Service creates two domain controllers and adds the DNS service on your behalf. The domain controllers are created in different subnets in an Amazon VPC this redundancy helps ensure that your directory remains accessible even if a failure occurs. If you need more domain controllers, you can add them later. For more information, see [Deploying additional domain controllers for your AWS Managed Microsoft AD](./ms_ad_deploy_additional_dcs.html).
+AWS Managed Microsoft AD creates a fully managed, Microsoft Active Directory in the AWS Cloud and is powered by Windows Server 2019 and operates at the 2016 Forest and Domain functional levels. When you create a directory with AWS Managed Microsoft AD, Directory Service creates two domain controllers and adds the DNS service on your behalf. The domain controllers are created in different subnets in an Amazon VPC this redundancy helps ensure that your directory remains accessible even if a failure occurs. If you need more domain controllers, you can add them later. For more information, see [Deploying additional domain controllers for your AWS Managed Microsoft AD](./ms_ad_deploy_additional_dcs.html).