A company has 50 AWS accounts managed by AWS Organizations. The IT team wants to implement a centralized authentication solution for their employees to access the AWS Management Console across all accounts using their existing on-premises Active Directory credentials.<br/><br/>Which AWS service should be used?

Answer options:

AWS Directory Service for Microsoft Active Directory

AWS IAM Identity Center (AWS SSO)

Amazon Cognito

AWS RAM (Resource Access Manager)

How to approach this question

Identify the service designed for workforce SSO across AWS Organizations.

Full Answer

B.AWS IAM Identity Center (AWS SSO)✓ Correct

AWS IAM Identity Center (AWS SSO)

AWS IAM Identity Center (successor to AWS Single Sign-On) helps you securely create or connect your workforce identities and manage their access centrally across AWS accounts and applications.

Common mistakes

Selecting Cognito for workforce identity scenarios.

Question 04 All questions Question 06

Practice the full AWS SAA-C03 Practice Exam 6

65 questions · hints · full answers · grading

More questions from this exam

Q01A company has multiple AWS accounts in an AWS Organizations organization. The security team wants...Medium Q02A company has two AWS accounts: Account A for development and Account B for production. Developer...Medium Q03A mobile application needs to authenticate users using their social media accounts (Facebook, Goo...Easy Q04A company is running an application on Amazon EC2 instances. The application needs to connect to ...Medium Q06A company wants to restrict access to an Amazon S3 bucket so that only requests originating from ...Medium

View all 65 questions →