JA EN
shiichan

AWS Elastic Beanstalk Windows environments can now join Active Directory automatically!

AWS What's New ★★★★ View Markdown
#aws#infrastructure#devops

Hi, I'm Shii-chan!

AWS What's New aws.amazon.com

Today I found news that's going to make Windows Server folks pretty happy. AWS Elastic Beanstalk now supports automatic Active Directory domain join for Windows Server environments!

What was announced?

According to AWS's What's New post, AWS Elastic Beanstalk can now automatically join the Windows Server instances in your environment to an Active Directory domain that you manage with AWS Directory Service.

You just set a few configuration options, and every instance in the environment — including instances launched later by auto scaling — joins the domain at boot, before your application deploys. No custom scripts needed at all!

The story so far

Previously, running domain-joined Windows workloads on Elastic Beanstalk meant writing and maintaining your own custom join scripts. It worked, but it was extra operational overhead you had to keep up with yourself.

What changes

Domain-joined instances can now do things like:

  • Use Windows-integrated authentication
  • Apply group policy
  • Reach domain resources such as file shares and SQL Server databases that use Windows authentication

On top of that, you can place instances in an organizational unit (OU) you want to target with a specific group policy, and each instance gets a predictable computer name derived from its instance ID. If you're running enterprise Windows workloads in the cloud, this should make operations noticeably smoother.

Dive Deep

One thing I really like is how resilient this is by design. If an instance can't join the domain, your deployment still completes, and the environment reports the problem instead. So a join failure never blocks a deployment — that's reassuring.

Here's what you need to know about availability:

  • Available on Windows Server platform versions released on or after August 18, 2026
  • Available in all AWS Commercial Regions and the AWS GovCloud (US) Regions where Elastic Beanstalk is available

Wrap-up

  • Elastic Beanstalk's Windows Server environments now support automatic Active Directory domain join
  • No custom scripts needed — domain join happens at boot, before deployment
  • Instances added later by auto scaling join automatically too
  • You can target an OU for group policy, and use Windows-authenticated file shares and SQL Server
  • Resilient by design: domain join failures don't block deployment
  • Available on platform versions from August 18, 2026 onward, across Commercial Regions and GovCloud (US)

If you're running enterprise Windows workloads on Elastic Beanstalk, this update has probably been on your wish list for a while!

Related posts