1. Active Directory Amazon Data Services Japan Solution Architect

2. ! ! ! LDAPActive DirectoryOpenLDAP 3. WorkSpacesCloudDirectory WorkSpacesConnectDirectoryVPCActive Directory 4. 1 Cloud Directory 5. Cloud Directory! ! WorkSpaces/ZocaloAWS! Web AWS DNS NetBIOS VPC ! 6. Cloud Directory! Active Directory! Multi-AZVPC2 DNS EC2ENI! Active Directory Active Directory (PCoIP) - A - B 7. Cloud DirectoryWorkSpacesAPIPublic IPPublic IPWorkSpacePCoIPCloud Directory 8. ! Management ConsoleWorkSpaces ! Windows ! WorkSpaces Client 9. Security Group! Security GroupSecurity Group directory id_controllers WorkSpace directory id_workspacesMembers ! Management ConsoleEC2! WorkSpace 10. ! Organizational UnitOU WorkSpaceOU Computers! Security Group WorkSpaceVPCENISecurity Group Security Group 11. 2 Connect Directory 12. Connect Directory! Active DirectoryActive DirectoryWorkSpaces/Zocalo! PC 13. Connect Directory! Amazon VPC Active DirectoryVPNDirect Connect! ! DNS2IP! Windows Server 2003 14. Connect Directory! VPC! Multi-AZVPC2Connect Directory - AConnect Directory - BDirectConnect/VPNAD 15. Connect Directory AWorkSpacesVPNPublic IPPublic IPWorkSpaceADADPCoIPConnectDirectory 16. ! Active Directory Management ConsoleWorkSpaces WorkSpaces Client 17. ! Organizational UnitOU! Security Group! Active Directory! Multi-Factor Authentication 18. 3 Multi-Factor Authentication 19. Multi-Factor AuthenticationMFA! Connect Directory! RADIUSMFA Symantec Validation and ID Protection Service (VIP) Microsoft RADIUS Server! 20. () Google Authenticator! Google Authenticator! EC2FreeRADIUSGoogle AuthenticatorPAMPluggable AuthenticationModuleRADIUSGUI 21. Demo! ADWorkSpace! Google Authenticator2 22. - 1! 23. - 2! Active Directory 24. - 3! 25. ! Cloud Directory Active Directory AWS WorkSpaces! Connect Directory Active Directory 26. Tips ! WSUSWindows! .msi / .zaphttp://docs.aws.amazon.com/workspaces/latest/adminguide/gpo_app_install.html! ! 27. Tips WorkSpace! WorkSpace - - Windows - - - - Windows - C- ! D 28. Tips Cloud Directory! Cloud DirectoryEC2Active Directory EC2DNSCloudDirectoryDNS EC2Cloud DirectoryAdministrator EC2OK