What option would you implement to successfully launch this application1?
Create a second, independent LOAP server in AWS for your application to use for authentication
Establish a VPN connection so your applications can authenticate against your existing on-premises LDAP servers
Establish a VPN connection between your data center and AWS create a LDAP replica on AWS and configure your application to use the LDAP replica for authentication
Create a second LDAP domain on AWS establish a VPN connection to establish a trust relationship between your new and existing domains and use the new domain for authentication
Explanations:
Creating a second, independent LDAP server in AWS would not align with the policy of minimal changes to user management, and it could introduce synchronization complexities.
Establishing a VPN connection allows the application to authenticate against the existing on-premises LDAP servers, ensuring low latency and minimal changes.
Creating an LDAP replica in AWS may involve complex synchronization tasks and does not necessarily meet the minimal change requirement for user management processes.
Establishing a new LDAP domain and creating trust relationships would introduce unnecessary complexity and changes to the existing user management.