During this lab i covered various things: how to create your aws client vpn using both mutual authentication with aws acm and user-based authentication with aws service directory service. I have explained every single steps in this lab with a design of an architecture to illustrate you the logic behind the functionnality of the used services in this lab. i illustrated you the functionnality of the route53 resolver and i demonstrated that by using the outboundpoint, to join the instances manually to your aws directory service domain name. i have explained the DHCP option set, the amazonDnsProvider, and how you can override the default one and define your own domain and the ip address of your dns server. i have explained you how to create a privated hosted zone and associate it with your vpc so your services within that vpc can query your dns records. i showed you how to join your instance that host your windows server to your directory, install your remote administration tools, to manage your users and computers and delegate the control to user on OU (organization unit). I gave you a hands on the AD Connector that is within the aws directory service, and how it is useful when you want to create HA for your aws client vpn with user-based authentication; and using the entreprise edition of directory service, the edition that enables you to replicate the DS accross regions then you create a service account on your AD so you can be able to connect to AD and sync users to that AD Connector
My Github: https://github.com/Abdelali12-codes
#aws #vpn #route53 #windowsserver #domaincontroller #sysops