无缝加入 Windows EC2 实例

此过程无缝地将 Windows EC2 实例联接到您的 Simple AD 目录。

无缝地联接 Windows EC2 实例

1. 登录 AWS 管理控制台并通过以下网址打开 Amazon EC2 控制台 https://console.amazonaws.cn/ec2/。

2. From the region selector in the navigation bar, choose the same region as the existing directory.

3. Choose Launch Instance.

4. On the Step 1 page, choose Select for the appropriate AMI.

5. On the Step 2 page, select the appropriate instance type, and then choose Next: Configure Instance Details.

6. On the Step 3 page, do the following, and then choose Next: Add Storage:

   1. For Network, choose the VPC that your directory was created in.

   2. For Subnet, choose one of the public subnets in your VPC. The subnet that you choose must have all external traffic routed to an internet gateway. If this is not the case, you won't be able to connect to the instance remotely.

   3. For Auto-assign Public IP, choose Enable.

      For more information about public and private IP addressing, see Amazon EC2 Instance IP Addressing in the Amazon EC2 用户指南（适用于 Windows 实例）.

   4. For Domain join directory, choose your domain from the list.

      注意

      This option is only available for Windows instances. Linux instances must be manually joined to the directory as explained in 手动加入 Linux 实例.

   5. For IAM role, do one of the following:

      Select an IAM role that has the AWS managed policies AmazonSSMManagedInstanceCore and AmazonSSMDirectoryServiceAccess attached to it.

      -or-

      If you haven't created an IAM role that has the AmazonSSMManagedInstanceCore and AmazonSSMDirectoryServiceAccess managed policies attached to it, choose the Create new IAM role link, and then do the following:

      1. Choose Create role.

      2. Under Select type of trusted entity, choose AWS service.

      3. Under Choose the service that this role will use, in the full list of services, choose EC2 .

      4. Under Select your use case, choose EC2, and the choose Next: Permissions.

      5. In the list of policies, select the AmazonSSMManagedInstanceCore and AmazonSSMDirectoryServiceAccess policies. (To filter the list, type SSM in the search box.)

         注意

         AmazonSSMDirectoryServiceAccess provides the permissions to join instances to an Active Directory managed by AWS Directory Service. AmazonSSMManagedInstanceCore provides the minimum permissions necessary to use the Systems Manager service. For more information about creating a role with these permissions, and for information about other permissions and policies you can assign to your IAM role, see Create an IAM Instance Profile for Systems Manager in the AWS Systems Manager 用户指南.

      6. Choose Next: Tags.

      7. (Optional) Add one or more tag key-value pairs to organize, track, or control access for this role, and then choose Next: Review.

      8. For Role name, enter a name for your new role, such as EC2DomainJoin or another name that you prefer.

      9. (Optional) For Role description, enter a description.

      10. Choose Create role.

      11. Go back to the Step 3 page. For IAM role, choose the refresh icon next to IAM role. Your new role should be visible in the menu. Choose it and leave the rest of the settings on this page with their default values, and then choose Next: Add Storage.

7. On both the Step 4 and Step 5 pages, leave the default settings or make changes as needed, and then choose the Next buttons.

8. On the Step 6 page, select a security group for the instance that has been configured to allow remote access to the instance from your network, and then choose Review and Launch.

9. On the Step 7 page, choose Launch, select a key pair, and then choose Launch Instance.