AWS Security Blog
AWS Directory Service Now Supports API Access and Logging Via AWS CloudTrail
Developers can now programmatically create and configure Simple AD and AD Connector directories in AWS Directory Service via the AWS SDKs or CLI. You can also now use Cloud Trail to log API actions performed via an SDK, the CLI, or AWS Directory Service console. Permissions for performing these actions can be controlled via an AWS IAM policy, and the APIs can be used in all AWS regions in which Directory Service is available.
To get started, download the latest AWS SDK or CLI, or learn more about the new APIs in our developer guide.
If you have questions, please post them on the Directory Service forum.
– Rob