A company has 50 AWS accounts managed by AWS Organizations. They want to provide their employees with single sign-on (SSO) access to these accounts using their existing on-premises Active Directory. Which AWS service should they use?

Answer options:

AWS Directory Service for Microsoft Active Directory

AWS IAM Identity Center

Amazon Cognito

AWS STS

How to approach this question

Match 'multi-account SSO' and 'workforce identity' to IAM Identity Center.

Full Answer

B.AWS IAM Identity Center✓ Correct

AWS IAM Identity Center is the recommended service for managing workforce access to AWS applications and multiple AWS accounts. It integrates easily with existing identity sources like Active Directory.

Common mistakes

Choosing Cognito, which is meant for application users, not AWS account administrators.

Question 14 All questions Question 16

Practice the full AWS SAA-C03 Practice Exam 5

65 questions · hints · full answers · grading

More questions from this exam

Q01A company needs to grant an external auditor read-only access to specific AWS resources. The audi...Easy Q02An application running on EC2 instances needs to access objects in an S3 bucket. The security tea...Medium Q03A company is designing a VPC for a multi-tier web application. They need to block specific malici...Medium Q04A large enterprise uses AWS Organizations to manage multiple accounts. The security team wants to...Hard Q05A company hosts a web application on an Application Load Balancer (ALB). They are experiencing SQ...Medium

View all 65 questions →