you can use AWS Systems Manager to automate joining domain controller instances to an Active Directory domain. Here are the basic steps:
Launch your Windows Server instances that will act as domain controllers using your preferred method like AWS CloudFormation templates. Make sure the latest version of the SSM Agent is installed on the instances.
Create an AWS Systems Manager document that defines the configuration steps to join the instance to the domain. This could include PowerShell or CLI commands.
Execute the document on your domain controller instances using the
aws:runCommand
action. This will trigger the domain join automation.
The document can dynamically obtain domain details like the domain name, username, and password from AWS Systems Manager Parameter Store. It can also target instances by tags for flexibility.
For self-managed Active Directory, the document would need to promote one of the instances to the primary domain controller. For AWS Managed AD, no promotion is needed.
Test connectivity to resources on the domain from your new domain joined instances.
The domain join automation can be integrated with other AWS services like AWS Application Migration Service for migrating and auto-joining servers to the domain.
https://aws.amazon.com/systems-manager/faq/
you can use AWS Systems Manager to automate joining domain controller instances to an Active Directory domain. Here are the basic steps:
Launch your Windows Server instances that will act as domain controllers using your preferred method like AWS CloudFormation templates. Make sure the latest version of the SSM Agent is installed on the instances.
Create an AWS Systems Manager document that defines the configuration steps to join the instance to the domain. This could include PowerShell or CLI commands.
Execute the document on your domain controller instances using the
aws:runCommand
action. This will trigger the domain join automation.
The document can dynamically obtain domain details like the domain name, username, and password from AWS Systems Manager Parameter Store. It can also target instances by tags for flexibility.
For self-managed Active Directory, the document would need to promote one of the instances to the primary domain controller. For AWS Managed AD, no promotion is needed.
Test connectivity to resources on the domain from your new domain joined instances.
The domain join automation can be integrated with other AWS services like AWS Application Migration Service for migrating and auto-joining servers to the domain.
https://aws.amazon.com/systems-manager/faq/
it is possible to use AWS Systems Manager Run Command to login to Powershell on a domain controller instance. Here are the basic steps:
Ensure the domain controller instance has an IAM role attached that provides the necessary permissions for Systems Manager, including
AmazonSSMManagedInstanceCore and AmazonSSMDirectoryServiceAccess policies.
Create an AWS Systems Manager document that runs a Powershell script to retrieve credentials for an Active Directory user using the Get-Credential cmdlet.
Store the Active Directory username and password in AWS Secrets Manager and retrieve them in the script using the Get-SecretValue cmdlet.
Use the credentials retrieved to run Powershell commands that require domain admin privileges, such as dsadd-user .
Execute the document using AWS:runCommand on the domain controller instance. This will run the Powershell script and commands as the Active Directory user.
https://docs.aws.amazon.com/directoryservice/latest/admin-guide/simple_ad_launching_instance.html
https://docs.aws.amazon.com/directoryservice/latest/admin-guide/step4_test_ec2_access.html
https://docs.aws.amazon.com/systems-manager/latest/userguide/ssm-agent-technical-details.html
The device has AWS Kinesis Video Streams SDK in the software and is able to transmit recorded video in real time to AWS Kinesis. Then the end users can use a desktop or web client to view, download or share the video stream. The client app should be simple and use a third-party player such as Google Shaka Player to display the video stream from Kinesis. How should the client app be designed
The client can use HLS for live playback. Use GetHLSStreamingSessionURL API to retrieve the HLS streaming session URL then provide the URL to the video player.
The most straightforward way to view or live playback the video in Kinesis Video Streams is using HLS. HTTP Live Streaming (HLS) is an industry-standard HTTP-based media streaming communications protocol.
GetHLSStreamingSessionURL API is required for third-party player to play the HLS streams.