You'll need the following before we can proceed:
- An instance of Simple AD. Refer to the Active Directory as a service recipe.
- The name of an access URL, which your users will use to log in (that is, https://bluthcorp.awsapps.com).
- Two AWS accounts. One of these will be your Auth Account, the other will be your App Account.
- A Windows server in your VPC, joined to your Simple AD domain, with Remote Server Admin Tools installed so we can manage groups and users.
If you launch the Windows server using the launch wizard, it will give you the option of joining the domain at boot time. Note that the server will need to be running with an instance role that will have the following two AWS Managed Policies: AmazonEC2RoleForSSM and AmazonSSMReadOnlyAccess.