A large corporation is creating a multi-account strategy and needs to determine how its employees should access the AWS infrastructure. Which of the following solutions would provide the MOST scalable solution?

Question

Kabi Bashala · Accepted Answer

Use a centralized account with IAM roles that employees can assume through federation with their existing identity provider Use cross-account roles to allow the federated users to assume their target role in the resource accounts.

Kabi Bashala · Answer

Create dedicated IAM users within each AWS account that employees can assume through federation based upon group membership in their existing identity provider

Kabi Bashala · Answer

Configure the AWS Security Token Service to use Kerberos tokens so that users can use their existing corporate user names and passwords to access AWS resources directly

Kabi Bashala · Answer

Configure the IAM trust policies within each account's role to set up a trust back to the corporation's existing identity provider allowing users to assume the role based off their SAML token

Question list

List of questions

Question 1

(0)

Question 2

(0)

Question 3

(0)

Question 4

(0)

Question 5

(0)

Question 6

(0)

Question 7

(0)

Question 8

(0)

Question 9

(0)

Question 10

(0)

Related questions

Question 454 - SCS-C01 discussion

Suggested answer: B

0 comments