terraform.aws-baseline-infra/modules/security_identity_compliance/ds-adconnector/main.tf

resource "aws_directory_service_directory" "connector" {
  name        = var.adc-domainname
  enable_sso  = false # enabling this results in error when terraform is ran in member accounts
  password    = var.adc-service-account-password
  size        = var.adc-size
  type        = "ADConnector"
  description = "ADConnector"
  tags        = var.default-tags

  connect_settings {
    customer_dns_ips  = var.adc-dns-ips
    customer_username = var.adc-service-account-username
    subnet_ids        = var.adc-subnet-ids
    vpc_id            = var.adc-vpc-id
  }
}