Operational excellence pillar
The operational excellence pillar focuses on running and monitoring systems, and continually improving processes and procedures. The following recommendations can help you meet the operational excellence design principles and architectural best practices for AWS Managed Microsoft AD.
Key focus areas
Automating changes
Responding to events
Defining standards to manage daily operations
Perform operations as code
Apply infrastructure as a code (IaC) to deploy AWS Managed Microsoft AD. For more information, see the GitHub quickstart-microsoft-activedirectory
repository. Automate Microsoft Active Directory operations procedures whenever possible. For example, it's a best practice to automate the management of user objects, group objects, and Group Policy Objects (GPOs).
Automate the management of domain memberships (join and unjoin).
Make frequent, small, reversible changes
Store IaC such as templates and scripts in a source control service, such as AWS CodeCommit, GitHub, or GitLab.
Require IaC deployments to use a continuous integration and continuous delivery (CI/CD) service, such as AWS CodeDeploy or AWS CodeBuild. These services compile, test, and deploy code in a test environment, before infrastructure is deployed on AWS and within Microsoft Active Directory.
Refine operations procedures frequently
Test your infrastructure changes in a test environment before deploying any updates to your production servers.
Anticipate failure
Load test your setup in a test environment before rolling out changes to production. For more information, see How to use the Active Directory Performance Testing tool on Windows Server 2012
on the Microsoft Blog. Automate AWS Managed Microsoft AD scaling based on your organization's utilization metrics. For more information, see How to automate AWS Managed Microsoft AD scaling based on utilization metrics
on the AWS Blog. Setup Amazon Simple Notification Service (Amazon SNS) messaging to receive metrics alarms and status changes. For more information, see Configure directory status notifications in the AWS Directory Service documentation.
