A municipal Windows server fleet must domain-join to a managed directory so file shares and line-of-business apps can use Active Directory identities with least-privilege admin groups. Which AWS service should anchor that design?
Select an answer to reveal the explanation.
Short Explanation
Windows boxes that need a real domain are like squad cars that need the city radio network—Directory Service (Managed Microsoft AD) is that network. Macie, Kinesis, and WAF are great tools, just not your domain controller.
Full Explanation
AWS Directory Service, including AWS Managed Microsoft AD, supports domain-join and AD-integrated authentication for Windows workloads and enables least-privilege admin group designs. Macie, Kinesis, and WAF address other security concerns and do not replace directory services for domain-joined fleets. This item stays at Associate identity-bound workload design depth.