Kerberos / Active Directory in the cloud

[#1]

If I want to configure multiple clusters in public cloud offerings (AWS, Azure, GCP) using Cloudbreak and my on premise cluster is using Kerberos / Active Directory - do I need to have my Kerberos / Active directory servers on premise and have the cloud communicate back and forth? Will the Kerberos/Active Directory credentials be cached in the cloud? If so, which components will hold the cache? Cloudbreak / Ambari?

[#2 · Accepted solution]

Since there have been no responses to this question for over a week, I've done research.

Cloud providers have solutions to active directory in their offering:

Azure: Azure Active Directory

AWS: AWS Directory Service

Both cloud providers have a way to sync your on-premise Active Directory with their cloud-based service (Azure Active Directory or AWS Directory Service). These solutions both include Kerberos authentication support.