Abstract: Systems, methods, and computer-readable media are disclosed for a one click active directory infrastructure. A process for managing an active directory infrastructure may include receiving a public application programming interface (API) call wherein the public API call is associated with an active directory of a private virtual network; determining, based on the public API call, a first account; determining that the first account is associated with a policy, wherein the policy indicates that the first account is permitted to access the active directory; and executing a function on the private virtual network, wherein the executing is associated with a second account of the active directory.

Abstract: A managed directory service receives, from a computer system operated in a first network, a request to obtain a set of credentials usable to access resources in a second network. In response to the request, the managed directory service determines, based at least in part on a first set of permissions in a directory maintained in the second network, that the computer system is authorized to receive the set of credentials. The managed directory service provides the set of credentials to the computer system, which enables use of the set of credentials to identify a second set of permissions for accessing resources in the second network.