Hybrid identity architecture bridging on-premises Active Directory with AWS through Microsoft Entra ID and IAM Identity Center. On-prem AD synchronizes to Entra ID for centralized identity governance with Conditional Access and MFA, while AWS Managed Microsoft AD supports legacy Windows and SQL Server workloads across high-availability deployments. IAM Identity Center federates Entra ID identities across Dev, Test, and Prod AWS accounts, enabling role-based access without storing user credentials in AWS. CloudTrail and CloudWatch with Container Insights provide unified security monitoring and alerting via SNS, creating a zero-trust audit trail across hybrid resources.