Build & test AWS Managed Microsoft Active Directory

[dms1981]

User Story

As a Modernisation Platform Engineer
I want to create a short-term deployment of AWS MMAD
So that I can identify any missing requirements prior to creating this for a Modernisation Platform customer

Value / Purpose

If we create an AWS MMAD in core-shared-services we can confirm that the SSO role created in this story is appropriate. We can also identify any potential missing pieces ahead of creating something for a customer at a later time.

Useful Contacts

@dms1981

Additional Information

#5736

We don't need to register a domain in Route53 as a resolver rule will do.

Proposal / Unknowns

No response

Definition of Done

• AWS MMAD created
• AWS MMAD access tested through SSO role-based login
• AWS MMAD destroyed

[dms1981]

Built a new Managed AD cluster in sprinkler for testing purposes

[dms1981]

Created Managed AD management instance for end-user testing. Will place this in blocked until it's been evaluated, then remove the MMAD terraform and close this issue.

[dms1981]

Removed resources through these PRs:

• Remove config for managed AD from sprinkler modernisation-platform-environments#4514
• Remove configuration for AWS Managed Microsoft Active Directory #5959
• Revert "Add SSO for directory management role" aws-root-account#855