AWS Private Certificate Authority (AWS Private CA) launches the Connector for Active Directory (AD). The Connector for AD allows you to use AWS Private CA as a drop-in replacement for your self-managed enterprise certificate authorities without the need to deploy, patch, or update local agents or proxy servers. Enterprises that use AD to manage Windows environments can reduce their private certificate authority (CA) costs and complexity. You can help meet your security and compliance goals by using AWS Private CA, a fully-managed service, which stores CA private keys in FIPS 140 validated hardware security modules (HSMs).
Source:: Amazon AWS