A startup is setting up its AWS environment and wants to establish secure access for its developers and applications. The solutions architect needs to follow the principle of least privilege and AWS security best practices. Which TWO actions should the solutions architect take to meet these requirements? (Select TWO.)
- Configure AWS IAM Identity Center to federate the company's corporate identity provider for user access.Answer
- Create IAM roles with least-privilege permissions and require users or applications to assume them.Answer
- CUse the AWS account root user credentials for daily administrative tasks to simplify permission management.
- DCreate individual IAM users with long-term access keys for all corporate active directory users to access AWS resources.
- EStore application database passwords as plaintext String parameters in Systems Manager Parameter Store for easy retrieval.
Answer
Configuring AWS IAM Identity Center to federate the company's corporate identity provider and creating IAM roles with least-privilege permissions.
Configuring AWS IAM Identity Center for identity federation and utilizing IAM roles with least-privilege policies are standard AWS best practices. Federation provides central access management using temporary security credentials, while roles enforce granular access limits without relying on long-term keys.
Step-by-Step Solution
Key Concept
AWS Identity and Access Management (IAM) security best practices including identity federation, least-privilege IAM roles, and avoiding long-term credentials or root user usage.
Estimated Time:1m 0s