Aws Managed AD

We have an AD at client’s side, and we are using Forge Rock and sync the AD on to the cloud. This is where we will edit username or password or email just in case if some things need to be verified. But these changes won’t go back to the AD at client side. Also we have an application where we will get a OTP(One time password) for the user's email to authenticate along with the password. What is Required We have to replicate the same using AWS Directory services or any other Directory services, except we are not touching or creating client side AD. Rather we will create the AD on the cloud and rest should replicate the same. you have to work remotely through Webex or Gotomeeting or any thing that you prefer. And is available when ever you needed. And we can start working immediately.