Self Service with AWS Managed Active Directory

Question

Hi community,

We have a web-based application running in standard n-tier architecture (EC2 instance web server, EC2 instance DB server, application/network load balancers etc) with authentication handled by AWS Managed Active Directory.

My question: is there a method/mechanism/app/tool that allows "self-service" for users hosted in that directory?  Eg, if a user forgets their password or it expires, how can we handle them requesting it be reset?

Something similar to ManageEngine AD Self Service Plus is what I'm thinking but am wondering if AWS has anything they provide?  I'm leaning towards possibly some sort of integration with AWS Identity Center but that looks like it needs Organizations to be setup and I don't know if that's in our scope at this time.

Many thanks,

IanM

Answer

Hi,

A proposal in case, you're not heavily bound to AD: on AWS, self-service authentication is provided by AWS Cognito. 50'000 users per month are in the free-tier.

See https://aws.amazon.com/cognito/ or for the features in detail: https://aws.amazon.com/cognito/details/

This post will propose you a very incremental way to migrate: https://aws.amazon.com/blogs/mobile/migrating-users-to-amazon-cognito-user-pools/

Using this mechanism will allow you to test on a limited number of users very safely.

Best,

Didier

Self Service with AWS Managed Active Directory

Relevant content