Abstract: Techniques for managing a cross-region directory service are described. A method of managing a cross-region directory service may include establishing a cross region peer connection between a first directory virtual network of a directory service in a first region of a provider network and a second directory virtual network of the directory service in a second region of the provider network, the second directory virtual network associated with a pre-allocated classless interdomain routing (CIDR) range, replicating, by a cross-region replicator, data or metadata associated with the directory service from the first region to the second region, and orchestrating one or more updates to the directory service in the second region based at least on the data or metadata replicated to the second region.

Abstract: A method includes determining to share access to a directory between a first web services account and a second web services account that lacks access to the directory, wherein the directory is managed by a directory service that executes within a first on-demand configurable pool of shared computing resources, and wherein the second web services account is associated with a second on-demand configurable pool of shared computing resources. The method includes generating a virtual directory for the second web services account, wherein the virtual directory comprises one or more virtual resources that are representations of resources on the directory, and wherein the virtual directory further comprises a reference to the directory. The method further includes receiving an access request to the directory from the second web services account, wherein the access request is received via the reference from the virtual directory to the directory, and then granting the access request.

Abstract: Techniques for replication of domain controller settings are described. A method for replicating domain controller settings may include identifying at least one event for a directory service implemented in a provider network, obtaining event data associated with the at least one event, the event data including a settings change, and replicating the settings change associated with the at least one event to a plurality of domain controllers of the directory service based on the event data associated with the at least one event, each of the plurality of domain controllers located in a different availability zone of the provider network.

Abstract: Techniques for replicating control plane metadata across regions are described. A method for replicating control plane metadata across regions may include receiving a request in a home region of a provider network to make a change to a cross-region service, receiving an event stream by a cross-region replication service, the event stream including the change to the cross-region service, and replicating, by the cross-region replication service, the change to the service in at least one of a plurality of expanded regions of the provider network, based on at least one attribute associated with the change in the event stream.

Abstract: A method includes determining to share access to a directory between a first web services account and a second web services account that lacks access to the directory, wherein the directory is managed by a directory service that executes within a first on-demand configurable pool of shared computing resources, and wherein the second web services account is associated with a second on-demand configurable pool of shared computing resources. The method includes generating a virtual directory for the second web services account, wherein the virtual directory comprises one or more virtual resources that are representations of resources on the directory, and wherein the virtual directory further comprises a reference to the directory. The method further includes receiving an access request to the directory from the second web services account, wherein the access request is received via the reference from the virtual directory to the directory, and then granting the access request.