aws ds create-trust
AWS Directory Service for Microsoft Active Directory allows you to configure trust relationships. For example, you can establish a trust between your AWS Managed Microsoft AD directory, and your existing on-premises Microsoft Active Directory. This would allow you to provide users and groups access to resources in either domain, with a single set of credentials. This action initiates the creation of the AWS side of a trust relationship between an AWS Managed Microsoft AD directory and an external domain. You can create either a forest trust or an external trust
Options
| Name | Description |
|---|---|
--directory-id <string> | The Directory ID of the AWS Managed Microsoft AD directory for which to establish the trust relationship |
--remote-domain-name <string> | The Fully Qualified Domain Name (FQDN) of the external domain for which to create the trust relationship |
--trust-password <string> | The trust password. The must be the same password that was used when creating the trust relationship on the external domain |
--trust-direction <string> | The direction of the trust relationship |
--trust-type <string> | The trust relationship type. Forest is the default |
--conditional-forwarder-ip-addrs <list> | The IP addresses of the remote DNS server associated with RemoteDomainName |
--selective-auth <string> | Optional parameter to enable selective authentication for the trust |
--cli-input-json <string> | Performs service operation based on the JSON string provided. The JSON string follows the format provided by ``--generate-cli-skeleton``. If other arguments are provided on the command line, the CLI values will override the JSON-provided values. It is not possible to pass arbitrary binary values using a JSON-provided value as the string will be taken literally |
--generate-cli-skeleton <string> | Prints a JSON skeleton to standard output without sending an API request. If provided with no value or the value ``input``, prints a sample input JSON that can be used as an argument for ``--cli-input-json``. If provided with the value ``output``, it validates the command inputs and returns a sample output JSON for that command |