Azure Active Directory Domain Services is full-fat AD, but they market it towards only using it for services in Azure. But you can set up a VPN from Azure to join on-prem stuff (or to replicate existing AD to Azure).
That's good to hear! I really wanted "hosted AD" from a cloud a few years ago, and Azure definitely did not offer this... or they marketed it so poorly I could not find it anywhere. :(
AWS has straight up guides for do's/dont's, and various ways to integrate their AD service with yours, including multiple scenarios such as running them as the masters of the forest, with read-only's on-site, and vice-versa.
AWS has straight up guides for do's/dont's, and various ways to integrate their AD service with yours, including multiple scenarios such as running them as the masters of the forest, with read-only's on-site, and vice-versa.