Can we extend OnPrem to Managed AD with trust then do migration with ADMT

Hi Guys,

We have our Domain Controllers running on Microsoft AD hosted on EC2 instances. It has lot of users and conputers authenticating against it.
Now the goal is to make your environment compatible for AWS applications and integration, seamless Domain join of new EC2s and lastly to retire EC2 hosted DCs.

In order to achieve this, can we extend our EC2 AD to AWS Managed AD with AD trust and then migrate all objects and passwords with ADMT tool and then demote EC2 AD?? Is this a good solution?