An enterprise is migrating its Active Directory to AWS. They want to use AWS Managed Microsoft AD. They have a strict requirement that the directory must be highly available across two AWS Regions to survive a complete region failure. How can this be achieved?

Deploy two separate AWS Managed Microsoft AD directories and set up a two-way trust.

Deploy AWS Managed Microsoft AD in the primary region and use the Multi-Region replication feature to replicate it to the secondary region.

Deploy EC2 instances running Windows Server in both regions and promote them to Domain Controllers.

Use AWS Directory Service AD Connector in the secondary region pointing to the primary region.