AWS re:Invent 2020: Best practices for running Microsoft Active Directory on AWS