Starting today, AWS Directory Service for Microsoft Active Directory (AWS Managed Microsoft AD) and AD Connector are integrating with AWS Private Certificate Authority (AWS Private CA) to issue certificates for domain-joined objects that use Active Directory (AD) auto-enrollment. You can use a fully managed AWS Private CA drop-in replacement for your self-managed enterprise CAs without the need to deploy, patch, or update local agents or proxy servers. This also enables you to accelerate the migration of AD-aware workloads to AWS.
Source:: Amazon AWS