How can I grant access to the AWS Management Console for on-premises Active Directory users?
I want to grant access to the AWS Management Console using my Active Directory domain credentials.
"I want to grant access to the AWS Management Console using my Active Directory domain credentials.Short descriptionManage Amazon Web Services (AWS) resources with AWS Identity and Access Management (IAM) role-based access to the AWS Management Console. Use either AD Connector or AWS Directory Service for Microsoft Active Directory. The IAM role defines the services, resources, and level of access that your Active Directory users have.ResolutionChoose either AD Connector or AWS Managed Microsoft ADCreate a VPN connection and configure an AD Connector between your on-premises domain with the following minimum port requirements:TCP/UDP 53 for DNSTCP/UDP 88 for Kerberos authenticationTCP/UDP 389 for LDAP authenticationFor more information, see AD Connector prerequisites.- or -Use an existing trust relationship between your on-premises domain and AWS Managed Microsoft AD with the following minimum port requirements:TCP/UDP 53 for DNSTCP/UDP 88 for Kerberos authenticationTCP/UDP 389 for LDAP authenticationTCP 445 for SMBFor more information, see Create a trust relationship between your AWS Managed Microsoft AD and your self-managed Active Directory domain.Set up authenticationCreate an access URL for the directory.Activate AWS Management Console access for your AD Connector or AWS Managed Microsoft AD.Create an IAM role that grants access to the AWS Management Console for services that you want your Active Directory users to have access to.Note: Be sure that the IAM role has a trust relationship with AWS Directory Service.Assign Active Directory users or groups to the IAM role.Verify that users can access the AWS Management Console. Open the directory access URL in a private browsing session and sign in with a user account that's assigned to the IAM role. Then, check the AWS service consoles to confirm that you're permitted or denied access to services as specified by the IAM role.Related informationCreating a role to delegate permissions to an IAM userFollow"