AWS Certified DevOps Engineer - Professional DOP-C02 — Topic 1 Question 231

Question

A company uses AWS Organizations to manage its AWS accounts. A DevOps engineer must ensure that all users who access the AWS Management Console are authenticated through the company’s corporate identity provider (IdP). Which combination of steps will meet these requirements? (Choose two.)

Accepted Answer

Correct answer: B, E. The correct answer is B, E. Option B: Use AWS IAM Identity Center to configure identity federation with SAML 2.0. Option E: Create an SCP in Organizations to deny password creation for IAM users. AWS IAM controls authenticated and authorized access to AWS resources with fine-grained policies. AWS Organizations centrally governs and secures multiple AWS accounts. Service Control Policies set guardrails on what accounts in an organization can do.

AWS Certified DevOps Engineer - Professional DOP-C02 — Question 231