7,023 questions
how we can add aws ec2 instnace to Azure entra
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(96, 20%, 19%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ENW%3C/text%3E%3C/svg%3E)
N Wakchaure, Jagdish
175
Reputation points
Customer is having two environment one is on azure and another one aws.
on Azure there is entra ID.
on AWS customer has created the two ec2 instances. which he wanted to be authenticated using the Azure Entra ID . could you please help us what all things are required and what detailed steps need at azure and AWS both sides. also we want this directory service to be federated with 1 more agencies . so when they login to ec2 instance they will use there named credentials .
Please help how we can achieve this.
Windows for business | Windows Client for IT Pros | Directory services | Active Directory
Microsoft Security | Active Directory Federation Services
1,307 questions
Microsoft Security | Microsoft Entra | Microsoft Entra ID
25,161 questions
Microsoft Security | Microsoft Entra | Other
2,599 questions
{count} votes
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(217.60000000000002, 51%, 31%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EBS%3C/text%3E%3C/svg%3E)
Bandela Siri Chandana 3,055 Reputation points Microsoft External Staff Moderator2024-12-24T17:39:11.2366667+00:00 Thank you for posting your query on Microsoft Q&A.
I understand that you are trying to add aws ec2 instnace to Azure entra and you want those instances to be authenticated using Azure Entra ID and also federate with another agency.
First you need to ensure that the users who are accessing are present in azure portal.
Add AWS IAM Identity Center from the gallery then Follow these steps to enable Microsoft Entra SSO
Upload metadata file. Once the metadata file is successfully uploaded, the Identifier and Reply URL values get auto populated in Basic SAML Configuration section.
Then you can access your ec2 instances and authenticate is done through Azure Entra Id.
For more information. Follow the link: https://learn.microsoft.com/en-us/entra/identity/saas-apps/aws-single-sign-on-tutorial#configure-aws-iam-identity-center-sso
Hope this helps. Do let us know if you have any further queries.
Thanks,
B. Siri Chandana.
-
Bandela Siri Chandana 3,055 Reputation points Microsoft External Staff Moderator
2024-12-26T10:48:37.8766667+00:00 Hi @N Wakchaure, Jagdish
Just checking in to see if above information was helpful. If you have any further updates on this issue, please feel free to post back. -
N Wakchaure, Jagdish 175 Reputation points
2024-12-26T11:35:53.38+00:00 Hi Chandana,
Do we need to setup the vpn tunnel between azure and AWS even if we setup above all the things that you have mentioned. Please let us know.
Regards
Jagdish
-
Bandela Siri Chandana 3,055 Reputation points Microsoft External Staff Moderator
2024-12-26T17:47:04.9266667+00:00 The setup of the VPN tunnel ensures secure communication between the two cloud environments over the public internet, using Internet Protocol Security encryption.
But in your environment you need not set up VPN if communication between Azure and AWS is secure and functional.
Hope this helps. Do let us know if you have any further queries.
Thanks,
B. Siri Chandana.
-
Bandela Siri Chandana 3,055 Reputation points Microsoft External Staff Moderator
2024-12-27T11:37:51.3033333+00:00 Hi @N Wakchaure, Jagdish
Just checking in to see if above information was helpful. If you have any further updates on this issue, please feel free to post back. -
Bandela Siri Chandana 3,055 Reputation points Microsoft External Staff Moderator
2024-12-30T09:44:36.79+00:00 Hi @N Wakchaure, Jagdish
Just checking in to see if above information was helpful. If you have any further updates on this issue, please feel free to post back. -
N Wakchaure, Jagdish 175 Reputation points
2025-01-03T14:09:56.5466667+00:00 hello Bandela, thank you for help, i am still having discussion with client. i will update you. Also can we have managed AD installed in AWS and one ore additional AD with Azure Entra sync then to add ec2 vm in domain. will this work .
is there any possible alternate solution
-
N Wakchaure, Jagdish 175 Reputation points
2025-01-03T14:16:42.32+00:00 above tutorial you mentioned but it doesn't give clarity how we can add ec2 instance to domain. it more looks form aws portal perspective,
-
Bandela Siri Chandana 3,055 Reputation points Microsoft External Staff Moderator
2025-01-09T06:38:44.09+00:00 Hi @N Wakchaure, Jagdish
Yes, it looks more from aws perspective to add aws ec2 instnace to Azure entra you need to integrate AWS IAM Identity Center with Microsoft Entra ID.1.Add AWS IAM Identity Center from the gallery.
2.Configure and test Microsoft Entra SSO for AWS IAM Identity Center.
3.Configure Microsoft Entra SSO.
4.Configure AWS IAM Identity Center SSO.
Kindly refer the document: https://learn.microsoft.com/en-us/entra/identity/saas-apps/aws-single-sign-on-tutorial#configure-aws-iam-identity-center-sso
Hope this helps. Do let us know if you have any further queries.
Thanks,
B. Siri Chandana.
Sign in to comment
Sign in to answer