AWS::DirectoryService::MicrosoftAD - AWS::DirectoryService::* - !GetAtt SecurityGroup

[guidola]

2. Scope of request

AWS::DirectoryService::* should Ideally return the security group that aws creates around it to make it easier to add additional entries which need to be added to allow integration with other dns servers or domain controllers.

3. Expected behavior

The 'Create' and 'Update' functions should always return the 'SecurityGroup' that for example 'DescribeDirectories' operation of the Sdk returns as an attribute later available through the !GetAtt function.

5. Helpful Links to speed up research and evaluation

https://docs.aws.amazon.com/AWSJavaScriptSDK/latest/AWS/DirectoryService.html#describeDirectories-property

6. Category (required) - Will help with tagging and be easier to find by other users to +1

11. Other (IoT, Migration, Budgets...)

7. Any additional context (optional)

[rshayman]

For example,

Having the directory's security Group available, would make it easier to configure the engress rules for a (Route53) Outbound Resolver Endpoint. At present, I have to added the AD IP addresses individually rather than by security group ID, which is less than ideal.