AWS Certified Solutions Architect - Associate SAA-C03 — Topic 1 Question 826

Question

A company is migrating applications from an on-premises Microsoft Active Directory that the company manages to AWS. The company deploys the applications in multiple AWS accounts. The company uses AWS Organizations to manage the accounts centrally. The company's security team needs a single sign-on solution across all the company's AWS accounts. The company must continue to manage users and groups that are in the on-premises Active Directory. Which solution will meet these requirements?

Accepted Answer

Correct answer: B. The correct answer is B. Option B: Enable AWS IAM Identity Center. Configure a two-way forest trust relationship to connect the company's self-managed Active Directory with IAM Identity Center by using AWS Directory Service for Microsoft Active Directory. AWS IAM controls authenticated and authorized access to AWS resources with fine-grained policies. AWS IAM Identity Center (SSO) centrally manages workforce access to multiple accounts and apps. AWS Directory Service provides managed Microsoft Active Directory in the cloud.

AWS Certified Solutions Architect - Associate SAA-C03 — Question 826