Documentation

The configuration that Amazon FSx uses to join a FSx for Windows File Server file system or an ONTAP storage virtual machine (SVM) to a self-managed (including on-premises) Microsoft Active Directory (AD) directory. For more information, see Using Amazon FSx with your self-managed Microsoft Active Directory or Managing SVMs.

See: newSelfManagedActiveDirectoryConfiguration smart constructor.

Create a value of SelfManagedActiveDirectoryConfiguration with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:fileSystemAdministratorsGroup:SelfManagedActiveDirectoryConfiguration', selfManagedActiveDirectoryConfiguration_fileSystemAdministratorsGroup - (Optional) The name of the domain group whose members are granted administrative privileges for the file system. Administrative privileges include taking ownership of files and folders, setting audit controls (audit ACLs) on files and folders, and administering the file system remotely by using the FSx Remote PowerShell. The group that you specify must already exist in your domain. If you don't provide one, your AD domain's Domain Admins group is used.

$sel:organizationalUnitDistinguishedName:SelfManagedActiveDirectoryConfiguration', selfManagedActiveDirectoryConfiguration_organizationalUnitDistinguishedName - (Optional) The fully qualified distinguished name of the organizational unit within your self-managed AD directory. Amazon FSx only accepts OU as the direct parent of the file system. An example is OU=FSx,DC=yourdomain,DC=corp,DC=com. To learn more, see RFC 2253. If none is provided, the FSx file system is created in the default location of your self-managed AD directory.

Only Organizational Unit (OU) objects can be the direct parent of the file system that you're creating.

$sel:domainName:SelfManagedActiveDirectoryConfiguration', selfManagedActiveDirectoryConfiguration_domainName - The fully qualified domain name of the self-managed AD directory, such as corp.example.com.

$sel:userName:SelfManagedActiveDirectoryConfiguration', selfManagedActiveDirectoryConfiguration_userName - The user name for the service account on your self-managed AD domain that Amazon FSx will use to join to your AD domain. This account must have the permission to join computers to the domain in the organizational unit provided in OrganizationalUnitDistinguishedName, or in the default location of your AD domain.

$sel:password:SelfManagedActiveDirectoryConfiguration', selfManagedActiveDirectoryConfiguration_password - The password for the service account on your self-managed AD domain that Amazon FSx will use to join to your AD domain.

$sel:dnsIps:SelfManagedActiveDirectoryConfiguration', selfManagedActiveDirectoryConfiguration_dnsIps - A list of up to three IP addresses of DNS servers or domain controllers in the self-managed AD directory.

(Optional) The name of the domain group whose members are granted administrative privileges for the file system. Administrative privileges include taking ownership of files and folders, setting audit controls (audit ACLs) on files and folders, and administering the file system remotely by using the FSx Remote PowerShell. The group that you specify must already exist in your domain. If you don't provide one, your AD domain's Domain Admins group is used.

(Optional) The fully qualified distinguished name of the organizational unit within your self-managed AD directory. Amazon FSx only accepts OU as the direct parent of the file system. An example is OU=FSx,DC=yourdomain,DC=corp,DC=com. To learn more, see RFC 2253. If none is provided, the FSx file system is created in the default location of your self-managed AD directory.

Only Organizational Unit (OU) objects can be the direct parent of the file system that you're creating.

The fully qualified domain name of the self-managed AD directory, such as corp.example.com.

The user name for the service account on your self-managed AD domain that Amazon FSx will use to join to your AD domain. This account must have the permission to join computers to the domain in the organizational unit provided in OrganizationalUnitDistinguishedName, or in the default location of your AD domain.

The password for the service account on your self-managed AD domain that Amazon FSx will use to join to your AD domain.

A list of up to three IP addresses of DNS servers or domain controllers in the self-managed AD directory.