Only to provide temporary limited credential services to a AWS services to a user
AWS STS(Security Token Services)
Identity for web and mobile application users
Cognito
AWS Managed Microsoft AD ((AD users both on prem and AWS)AD Connector (AD Users onpremise)Simple AD (AD users on AWS only)
AWS Directory services
Single Sign On Service
AWS IAM Identity Center (SSO)