What should the solutions architect recommend?

A company is performing an AWS Well-Architected Framework review of an existing workload deployed on AWS. The review Identified a public-facing website running on the same Amazon EC2 instance as a Microsoft Active Directory domain controller that was installed recently to support other AWS services A solutions architect needs to recommend a new design that would improve the security of the architecture and minimize the administrative demand on IT staff

What should the solutions architect recommend?
A . Use AWS Directory Service to create a managed Active Directory Uninstall Active Directory on the current EC2 instance
B . Create another EC2 instance in the same subnet and reinstall Active Directory on it Uninstall Active Directory on the current EC2 instance
C . Use AWS Directory Service to create an Active Directory connector Proxy Active Directory requests to the Active Directory domain controller running on the current EC2 instance
D . Enable AWS Single Sign-On (AWS SSO) with Security Assertion Markup Language (SAML) 2 0 federation with the current Active Directory controller Modify the EC2 instance’s security group to deny public access to Active Directory

View Answer

Answer: A