We recommend new projects start with resources from the AWS provider.
published on Monday, Nov 2, 2026 by Pulumi
We recommend new projects start with resources from the AWS provider.
published on Monday, Nov 2, 2026 by Pulumi
Resource Type definition for AWS::DirectoryService::MicrosoftAD
Create MicrosoftAd Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new MicrosoftAd(name: string, args: MicrosoftAdArgs, opts?: CustomResourceOptions);@overload
def MicrosoftAd(resource_name: str,
args: MicrosoftAdArgs,
opts: Optional[ResourceOptions] = None)
@overload
def MicrosoftAd(resource_name: str,
opts: Optional[ResourceOptions] = None,
vpc_settings: Optional[MicrosoftAdVpcSettingsArgs] = None,
create_alias: Optional[bool] = None,
edition: Optional[MicrosoftAdEdition] = None,
enable_sso: Optional[bool] = None,
name: Optional[str] = None,
password: Optional[str] = None,
short_name: Optional[str] = None)func NewMicrosoftAd(ctx *Context, name string, args MicrosoftAdArgs, opts ...ResourceOption) (*MicrosoftAd, error)public MicrosoftAd(string name, MicrosoftAdArgs args, CustomResourceOptions? opts = null)
public MicrosoftAd(String name, MicrosoftAdArgs args)
public MicrosoftAd(String name, MicrosoftAdArgs args, CustomResourceOptions options)
type: aws-native:directoryservice:MicrosoftAd
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
resource "aws-native_directoryservice_microsoft_ad" "name" {
# resource properties
}Parameters
- name string
- The unique name of the resource.
- args MicrosoftAdArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args MicrosoftAdArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args MicrosoftAdArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args MicrosoftAdArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args MicrosoftAdArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
MicrosoftAd Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The MicrosoftAd resource accepts the following input properties:
- Vpc
Settings Pulumi.Aws Native. Directory Service. Inputs. Microsoft Ad Vpc Settings - Specifies the VPC settings of the Microsoft AD directory server in AWS.
- Create
Alias bool - Specifies an alias for a directory and assigns the alias to the directory. The alias is used to construct the access URL for the directory, such as http://.awsapps.com. By default, AWS CloudFormation does not create an alias.
- Edition
Pulumi.
Aws Native. Directory Service. Microsoft Ad Edition - AWS Managed Microsoft AD is available in two editions: Standard and Enterprise.
- Enable
Sso bool - Whether to enable single sign-on for a Microsoft Active Directory in AWS. Single sign-on allows users in your directory to access certain AWS services from a computer joined to the directory without having to enter their credentials separately. If you don't specify a value, AWS CloudFormation disables single sign-on by default.
- Name string
- The fully qualified domain name for the AWS Managed Microsoft AD directory, such as corp.example.com. This name will resolve inside your VPC only. It does not need to be publicly resolvable.
- Password string
- The password for the default administrative user named Admin. If you need to change the password for the administrator account, see the ResetUserPassword API call in the AWS Directory Service API Reference.
- Short
Name string - The NetBIOS name for your domain, such as CORP. If you don't specify a NetBIOS name, it will default to the first part of your directory DNS. For example, CORP for the directory DNS corp.example.com.
- Vpc
Settings MicrosoftAd Vpc Settings Args - Specifies the VPC settings of the Microsoft AD directory server in AWS.
- Create
Alias bool - Specifies an alias for a directory and assigns the alias to the directory. The alias is used to construct the access URL for the directory, such as http://.awsapps.com. By default, AWS CloudFormation does not create an alias.
- Edition
Microsoft
Ad Edition - AWS Managed Microsoft AD is available in two editions: Standard and Enterprise.
- Enable
Sso bool - Whether to enable single sign-on for a Microsoft Active Directory in AWS. Single sign-on allows users in your directory to access certain AWS services from a computer joined to the directory without having to enter their credentials separately. If you don't specify a value, AWS CloudFormation disables single sign-on by default.
- Name string
- The fully qualified domain name for the AWS Managed Microsoft AD directory, such as corp.example.com. This name will resolve inside your VPC only. It does not need to be publicly resolvable.
- Password string
- The password for the default administrative user named Admin. If you need to change the password for the administrator account, see the ResetUserPassword API call in the AWS Directory Service API Reference.
- Short
Name string - The NetBIOS name for your domain, such as CORP. If you don't specify a NetBIOS name, it will default to the first part of your directory DNS. For example, CORP for the directory DNS corp.example.com.
- vpc_
settings object - Specifies the VPC settings of the Microsoft AD directory server in AWS.
- create_
alias bool - Specifies an alias for a directory and assigns the alias to the directory. The alias is used to construct the access URL for the directory, such as http://.awsapps.com. By default, AWS CloudFormation does not create an alias.
- edition "Enterprise" | "Standard"
- AWS Managed Microsoft AD is available in two editions: Standard and Enterprise.
- enable_
sso bool - Whether to enable single sign-on for a Microsoft Active Directory in AWS. Single sign-on allows users in your directory to access certain AWS services from a computer joined to the directory without having to enter their credentials separately. If you don't specify a value, AWS CloudFormation disables single sign-on by default.
- name string
- The fully qualified domain name for the AWS Managed Microsoft AD directory, such as corp.example.com. This name will resolve inside your VPC only. It does not need to be publicly resolvable.
- password string
- The password for the default administrative user named Admin. If you need to change the password for the administrator account, see the ResetUserPassword API call in the AWS Directory Service API Reference.
- short_
name string - The NetBIOS name for your domain, such as CORP. If you don't specify a NetBIOS name, it will default to the first part of your directory DNS. For example, CORP for the directory DNS corp.example.com.
- vpc
Settings MicrosoftAd Vpc Settings - Specifies the VPC settings of the Microsoft AD directory server in AWS.
- create
Alias Boolean - Specifies an alias for a directory and assigns the alias to the directory. The alias is used to construct the access URL for the directory, such as http://.awsapps.com. By default, AWS CloudFormation does not create an alias.
- edition
Microsoft
Ad Edition - AWS Managed Microsoft AD is available in two editions: Standard and Enterprise.
- enable
Sso Boolean - Whether to enable single sign-on for a Microsoft Active Directory in AWS. Single sign-on allows users in your directory to access certain AWS services from a computer joined to the directory without having to enter their credentials separately. If you don't specify a value, AWS CloudFormation disables single sign-on by default.
- name String
- The fully qualified domain name for the AWS Managed Microsoft AD directory, such as corp.example.com. This name will resolve inside your VPC only. It does not need to be publicly resolvable.
- password String
- The password for the default administrative user named Admin. If you need to change the password for the administrator account, see the ResetUserPassword API call in the AWS Directory Service API Reference.
- short
Name String - The NetBIOS name for your domain, such as CORP. If you don't specify a NetBIOS name, it will default to the first part of your directory DNS. For example, CORP for the directory DNS corp.example.com.
- vpc
Settings MicrosoftAd Vpc Settings - Specifies the VPC settings of the Microsoft AD directory server in AWS.
- create
Alias boolean - Specifies an alias for a directory and assigns the alias to the directory. The alias is used to construct the access URL for the directory, such as http://.awsapps.com. By default, AWS CloudFormation does not create an alias.
- edition
Microsoft
Ad Edition - AWS Managed Microsoft AD is available in two editions: Standard and Enterprise.
- enable
Sso boolean - Whether to enable single sign-on for a Microsoft Active Directory in AWS. Single sign-on allows users in your directory to access certain AWS services from a computer joined to the directory without having to enter their credentials separately. If you don't specify a value, AWS CloudFormation disables single sign-on by default.
- name string
- The fully qualified domain name for the AWS Managed Microsoft AD directory, such as corp.example.com. This name will resolve inside your VPC only. It does not need to be publicly resolvable.
- password string
- The password for the default administrative user named Admin. If you need to change the password for the administrator account, see the ResetUserPassword API call in the AWS Directory Service API Reference.
- short
Name string - The NetBIOS name for your domain, such as CORP. If you don't specify a NetBIOS name, it will default to the first part of your directory DNS. For example, CORP for the directory DNS corp.example.com.
- vpc_
settings MicrosoftAd Vpc Settings Args - Specifies the VPC settings of the Microsoft AD directory server in AWS.
- create_
alias bool - Specifies an alias for a directory and assigns the alias to the directory. The alias is used to construct the access URL for the directory, such as http://.awsapps.com. By default, AWS CloudFormation does not create an alias.
- edition
Microsoft
Ad Edition - AWS Managed Microsoft AD is available in two editions: Standard and Enterprise.
- enable_
sso bool - Whether to enable single sign-on for a Microsoft Active Directory in AWS. Single sign-on allows users in your directory to access certain AWS services from a computer joined to the directory without having to enter their credentials separately. If you don't specify a value, AWS CloudFormation disables single sign-on by default.
- name str
- The fully qualified domain name for the AWS Managed Microsoft AD directory, such as corp.example.com. This name will resolve inside your VPC only. It does not need to be publicly resolvable.
- password str
- The password for the default administrative user named Admin. If you need to change the password for the administrator account, see the ResetUserPassword API call in the AWS Directory Service API Reference.
- short_
name str - The NetBIOS name for your domain, such as CORP. If you don't specify a NetBIOS name, it will default to the first part of your directory DNS. For example, CORP for the directory DNS corp.example.com.
- vpc
Settings Property Map - Specifies the VPC settings of the Microsoft AD directory server in AWS.
- create
Alias Boolean - Specifies an alias for a directory and assigns the alias to the directory. The alias is used to construct the access URL for the directory, such as http://.awsapps.com. By default, AWS CloudFormation does not create an alias.
- edition "Enterprise" | "Standard"
- AWS Managed Microsoft AD is available in two editions: Standard and Enterprise.
- enable
Sso Boolean - Whether to enable single sign-on for a Microsoft Active Directory in AWS. Single sign-on allows users in your directory to access certain AWS services from a computer joined to the directory without having to enter their credentials separately. If you don't specify a value, AWS CloudFormation disables single sign-on by default.
- name String
- The fully qualified domain name for the AWS Managed Microsoft AD directory, such as corp.example.com. This name will resolve inside your VPC only. It does not need to be publicly resolvable.
- password String
- The password for the default administrative user named Admin. If you need to change the password for the administrator account, see the ResetUserPassword API call in the AWS Directory Service API Reference.
- short
Name String - The NetBIOS name for your domain, such as CORP. If you don't specify a NetBIOS name, it will default to the first part of your directory DNS. For example, CORP for the directory DNS corp.example.com.
Outputs
All input properties are implicitly available as output properties. Additionally, the MicrosoftAd resource produces the following output properties:
- Alias string
- The alias for a directory
- Directory
Id string - Unique identifier for the Microsoft Active Directory
- Dns
Ip List<string>Addresses - The IP addresses of the DNS servers for the directory, such as [ "172.31.3.154", "172.31.63.203" ].
- Id string
- The provider-assigned unique ID for this managed resource.
- Alias string
- The alias for a directory
- Directory
Id string - Unique identifier for the Microsoft Active Directory
- Dns
Ip []stringAddresses - The IP addresses of the DNS servers for the directory, such as [ "172.31.3.154", "172.31.63.203" ].
- Id string
- The provider-assigned unique ID for this managed resource.
- alias string
- The alias for a directory
- directory_
id string - Unique identifier for the Microsoft Active Directory
- dns_
ip_ list(string)addresses - The IP addresses of the DNS servers for the directory, such as [ "172.31.3.154", "172.31.63.203" ].
- id string
- The provider-assigned unique ID for this managed resource.
- alias String
- The alias for a directory
- directory
Id String - Unique identifier for the Microsoft Active Directory
- dns
Ip List<String>Addresses - The IP addresses of the DNS servers for the directory, such as [ "172.31.3.154", "172.31.63.203" ].
- id String
- The provider-assigned unique ID for this managed resource.
- alias string
- The alias for a directory
- directory
Id string - Unique identifier for the Microsoft Active Directory
- dns
Ip string[]Addresses - The IP addresses of the DNS servers for the directory, such as [ "172.31.3.154", "172.31.63.203" ].
- id string
- The provider-assigned unique ID for this managed resource.
- alias str
- The alias for a directory
- directory_
id str - Unique identifier for the Microsoft Active Directory
- dns_
ip_ Sequence[str]addresses - The IP addresses of the DNS servers for the directory, such as [ "172.31.3.154", "172.31.63.203" ].
- id str
- The provider-assigned unique ID for this managed resource.
- alias String
- The alias for a directory
- directory
Id String - Unique identifier for the Microsoft Active Directory
- dns
Ip List<String>Addresses - The IP addresses of the DNS servers for the directory, such as [ "172.31.3.154", "172.31.63.203" ].
- id String
- The provider-assigned unique ID for this managed resource.
Supporting Types
MicrosoftAdEdition, MicrosoftAdEditionArgs
- Enterprise
Enterprise- Standard
Standard
- Microsoft
Ad Edition Enterprise Enterprise- Microsoft
Ad Edition Standard Standard
- "Enterprise"
Enterprise- "Standard"
Standard
- Enterprise
Enterprise- Standard
Standard
- Enterprise
Enterprise- Standard
Standard
- ENTERPRISE
Enterprise- STANDARD
Standard
- "Enterprise"
Enterprise- "Standard"
Standard
MicrosoftAdVpcSettings, MicrosoftAdVpcSettingsArgs
Contains VPC information for the CreateDirectory or CreateMicrosoftAD operation- Subnet
Ids List<string> - The identifiers of the subnets for the directory servers. The two subnets must be in different Availability Zones. AWS Directory Service specifies a directory server and a DNS server in each of these subnets.
- Vpc
Id string - The identifier of the VPC in which to create the directory.
- subnet_
ids list(string) - The identifiers of the subnets for the directory servers. The two subnets must be in different Availability Zones. AWS Directory Service specifies a directory server and a DNS server in each of these subnets.
- vpc_
id string - The identifier of the VPC in which to create the directory.
- subnet
Ids List<String> - The identifiers of the subnets for the directory servers. The two subnets must be in different Availability Zones. AWS Directory Service specifies a directory server and a DNS server in each of these subnets.
- vpc
Id String - The identifier of the VPC in which to create the directory.
- subnet_
ids Sequence[str] - The identifiers of the subnets for the directory servers. The two subnets must be in different Availability Zones. AWS Directory Service specifies a directory server and a DNS server in each of these subnets.
- vpc_
id str - The identifier of the VPC in which to create the directory.
- subnet
Ids List<String> - The identifiers of the subnets for the directory servers. The two subnets must be in different Availability Zones. AWS Directory Service specifies a directory server and a DNS server in each of these subnets.
- vpc
Id String - The identifier of the VPC in which to create the directory.
Package Details
- Repository
- AWS Native pulumi/pulumi-aws-native
- License
- Apache-2.0
We recommend new projects start with resources from the AWS provider.
published on Monday, Nov 2, 2026 by Pulumi