Amazon Directory Service Pricing

Amazon Directory Service offers Amazon Directory Service for Microsoft Active Directory, also known as Amazon Web Services Managed Microsoft AD, and AD Connector. With Amazon Directory Service, you pay only for the type and size of the managed directory that you use. There is no up-front commitment and no minimum fee. You can delete your managed directory at any time.

Amazon Web Services Managed Microsoft AD allows you to use a directory in one account and share it with multiple accounts and VPCs. There is an hourly sharing charge for each additional account to which you share a directory. There is no sharing charge for additional VPCs to which you share a directory, or for the account in which you install the directory. Enterprise Edition sharing and Standard Edition sharing charges for different regions are listed in pricing table below. Directory sharing does not qualify for free-trial.

You can try Amazon Web Services Managed Microsoft AD and small AD Connector at no additional charge through the Directory Service 30-day limited free trial. The Directory Service 30-day limited free trial provides you with 1,500 instance hours of use across all your Directory Service managed directories during your first 30 days as a Directory Service customer. Amazon Web Services meters the Directory Service 30-day limited free-trial hours based on the type of managed directory and the number of domain controllers that you create.

Amazon Web Services Managed Microsoft AD is offered in two editions to help you create a managed Active Directory that meets your organization’s needs. Both Standard Edition and Enterprise Edition can be used as your organization’s primary directory to manage users, devices, and computers. You also can use both editions to create resource forests and extend your on-premises AD to the Amazon Web Services Cloud. Resource forests use a trust relationship with your on-premises AD to enable you to access Amazon Web Services applications and resources with your on-premises AD credentials. In a resource forest model, users are managed in your on-premises AD and the resource forest is used to manage your Amazon Web Services resources. Both editions also support the creation of additional domain controller instances to improve the redundancy and performance of your managed directory.

Standard Edition

Amazon Web Services Microsoft AD (Standard Edition) is optimized to be a primary directory for small and midsize businesses with up to 5,000 employees. It provides you enough storage capacity to support up to 30,000* directory objects, such as users, groups, and computers.

Enterprise Edition

Amazon Web Services Microsoft AD (Enterprise Edition) is designed to support enterprise organizations with up to 500,000* directory objects.

Comparison Table  

*Upper limits are approximations. Your directory may support more or less directory objects depending on the size of your directory objects and the behavior and performance needs of your applications.  

Pricing Table

For each Amazon Web Services Managed Microsoft AD directory, Amazon Web Services creates the minimum two domain controllers automatically to provide high availability. You can scale out your managed directory by creating additional domain controllers to improve your managed directory performance and availability.

AD Connector is a proxy that enables you to use identities from your existing self-managed Microsoft Active Directory (AD) with compatible Amazon Web Services applications, such as Amazon WorkSpaces. You can also use AD Connector to join Amazon EC2 instances to your AD domain and manage these instances using your existing group policy objects. This makes it easier to deploy AD-aware applications on these Amazon EC2 instances and use your self-managed AD for user and group authorization.

Pricing table

Amazon Web Services charges for AD Connector are based on the size of your managed directory (small or large) and the number of hours that your managed directory is running. The hourly pricing includes two instances for high availability.

If you use Amazon WorkSpaces, Amazon WorkDocs, or Amazon WorkMail (in regions where available) in conjunction with AD Connector, Amazon Web Services will not charge you for AD Connector, as long as you have active users of Amazon WorkSpaces, Amazon WorkDocs, or Amazon WorkMail. In order to qualify for free usage of AD Connector, you must have at least one active user for small directories each month and at least 100 active users for large directories each month. You can also pay for Amazon Web Services Managed Microsoft AD, and use it in conjunction with Amazon applications, such as Amazon WorkSpaces and Amazon WorkMail.

Example 1: A single managed directory with the default two domain controllers (without shared directory)

If you are a new Amazon Directory Service customer and create a Directory Service for Microsoft Active Directory (Enterprise Edition) managed directory in the China (Beijing) region with the default of two domain controllers, and run that managed directory 24 hours a day for 60 days, we calculate your charges as follows:

The Amazon Directory Service 30-day limited free trial that is available both in Amazon Web Services China (Ningxia) region and Amazon Web Services China (Beijing) region includes 1,500 hours of use across all your eligible Directory Service managed directories. Each domain controller in your managed Microsoft Active Directory uses one limited free trial hour for every hour that the domain controller is running. Unused hours do not rollover. By default, we create the minimum two domain controllers on your behalf. 

Summary of charges for first 30 days

You do not incur any charges for the first 30 days.

Amazon Directory Service for Microsoft Active Directory charge                        ¥ 0

24 hours x 30 days = 720 hours per domain controller

2 domain controllers per managed directory (the minimum)

720 hours x 2 total domain controllers = 1,440 total domain controller hours

1,440 total hours – 1,500 limited free-trial hours = 0 billable domain controller hours

After 30 days or 1,500 free-trial hours (whichever comes first), we bill you at the hourly rate per managed directory.

Summary of charges after first 30 days

Your bill for the first 30 days of use after the expiration of the free trial is ¥ 3,008.16.

Amazon Directory Service for Microsoft Active Directory charge                         ¥ 3,008.16

24 hours x 30 days = 720 hours per domain controller

2 domain controllers per managed directory (the minimum)

720 hours x 2 total domain controllers = 1,440 total domain controller hours

1,440 total hours x ¥ 2.089 per domain controller hour = ¥ 3,008.16

Note that although the pricing table shown on this page lists the hourly cost per managed directory (¥ 4.178 per hour), your Amazon Web Services bill lists each domain controller as an individual line item. Your bill shows two domain controllers, each for ¥ 2.089 per hour, totaling ¥ 1,504.08 each.

In the future, you will be billed at the hourly rate per managed directory plus any additional domain controllers.

 

Example 2: A single managed directory with the default two domain controllers and shared with 3 additional accounts

You are a new Amazon Directory Service customer and create a Directory Service for Microsoft Active Directory (Enterprise Edition) managed directory in an account in the China (Beijing) region with the default of two domain controllers. If you share this directory with 3 of your other accounts and run the directory 24 hours a day for 60 days, we calculate your charges as follows:

The Amazon Directory Service 30-day limited free trial that is available both in Amazon Web Services China (Ningxia) region and Amazon Web Services China (Beijing) region includes 1,500 hours of use across all your eligible Directory Service managed directories. Each domain controller in your managed Microsoft Active Directory uses one limited free trial hour for every hour that the domain controller is running. Unused hours do not rollover. By default, we create the minimum two domain controllers on your behalf. Directory sharing feature does not qualify for free trial. 

Summary of charges for first 30 days

You do not incur any charges for the domain controller for first 30 days.

Amazon Directory Service for Microsoft Active Directory charge                         ¥ 1,353.672

(includes domain controller charge + shared managed directory charge)

1. Domain controller charge:                                                                               ¥ 0

24 hours x 30 days = 720 hours per domain controller

2 domain controllers per managed directory (the minimum)

720 hours x 2 total domain controllers = 1,440 total domain controller hours

1,440 total hours – 1,500 limited free-trial hours = 0 billable domain controller hours

2. Shared managed directory charge:                                                       ¥ 1,353.672

24 hours x 30 days = 720 hours per domain shared directory

3 accounts share 1 directory

720 hours x 3 accounts x 1 shared directory = 2,160 total shared directory hours

2,160 total hours x ¥ 0.6267 per shared directory hour = ¥ 1,353.672

After 30 days or 1,500 free-trial hours (whichever comes first), we bill you at the hourly rate per managed directory.

Summary of charges after first 30 days

Your bill for the first 30 days of use after the expiration of the free trial is ¥ 3,008.16.

Amazon Directory Service for Microsoft Active Directory charge                          ¥ 4,361.832

(includes domain controller charge + shared managed directory charge)

1. Domain controller charges:                                                                      ¥ 3,008.16

24 hours x 30 days = 720 hours per domain controller

2 domain controllers per managed directory (the minimum)

720 hours x 2 total domain controllers = 1,440 total domain controller hours

1,440 total hours x ¥ 2.089 per domain controller hour = ¥ 3,008.16

2. Shared managed directory charge:                                                                    ¥ 1,353.672

24 hours x 30 days = 720 hours per domain shared directory

3 accounts share 1 directory

720 hours x 3 accounts x 1 shared directory = 2,160 total shared directory hours

2,160 total hours x ¥ 0.6267 per shared directory hour = ¥ 1,353.672

Note that although the pricing table shown on this page lists the hourly cost per managed directory (¥ 4.178 per hour), your Amazon Web Services bill lists each domain controller as an individual line item. Your bill shows two domain controllers, each for ¥ 2.089 per hour, totaling ¥ 1,504.08 each.

In the future, you will be billed at the hourly rate per managed directory plus any additional domain controllers.

Example 3: A single managed directory with one additional domain controller (without shared directory)

If you are a new Amazon Directory Service customer and create a Directory Service for Microsoft Active Directory (Enterprise Edition) managed directory in the China (Beijing) region with one additional domain controller (for a total of three domain controllers), and run that managed directory 24 hours a day for 60 days, we calculate your charges as follows:

The Amazon Directory Service 30-day limited free trial that is available both in Amazon Web Services China (Ningxia) region and Amazon Web Services China (Beijing) region includes 1,500 hours of use across all your eligible Directory Service managed directories. Each domain controller in your managed Microsoft Active Directory uses one limited free trial hour for every hour that the domain controller is running. 

Summary of charges for first 30 days

Your bill for the first 30 days of use is ¥ 1,378.74

Amazon Directory Service for Microsoft Active Directory charge       ¥ 1,378.74

24 hours x 30 days = 720 hours per domain controller

2 domain controllers per managed directory (the minimum) + 1 additional domain controller = 3 total domain controllers

720 hours x 3 total domain controllers = 2,160 total domain controller hours

2,160 total hours – 1,500 limited free-trial hours = 660 billable domain-controller hours

660 billable hours x ¥ 2.089 per domain controller hour = ¥ 1,378.74

Note that though the pricing table on this page lists the hourly cost per managed directory (¥ 4.178 per hour), your Amazon Web Services bill lists each domain controller as an individual line item. Your bill shows three domain controllers, each for ¥ 2.089 per hour, totaling ¥ 459.58 each.

After 30 days or 1,500 free-trial hours (whichever comes first), we bill you at the hourly rate per managed directory plus any additional domain controllers.

Summary of charges after first 30 days

Your bill for the first 30 days of use after the expiration of the free trial is ¥ 4,512.24

Amazon Directory Service for Microsoft Active Directory charge         ¥ 4,512.24

24 hours x 30 days = 720 hours per domain controller

2 domain controllers per managed directory (the minimum) + 1 additional domain controller = 3 total domain controllers

720 hours x 3 total domain controllers = 2,160 total domain controller hours

2,160 total hours x ¥ 2.089 per domain controller hour = ¥ 4,512.24

Again, note that although the pricing table on this page lists the hourly cost per managed directory (¥ 4.178 per hour), your Amazon Web Services bill lists each domain controller as an individual line item. Your bill shows three domain controllers, each for ¥ 2.089 per hour, totaling ¥ 1,504.08 each.

In the future, you will be billed at the hourly rate per managed directory plus any additional domain controllers.